What’s Vulnerable › Products

totalsoft Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your totalsoft Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery version is affected

Latest totalsoft Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery vulnerabilities

• CVE-2024-9769 — Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2024-10247 — YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection (CVSS 4.9)
• CVE-2023-45069 — WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2023-25979 — WordPress Video Gallery – YouTube Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)