https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T03:52:32.321369+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120409 fkie_cve-2026-120409 2026-11-10T03:52:32.323365+00:00

The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving it through its standalone player page and its download link, allowing unauthenticated visitors to obtain the media source of password-protected videos, such as unlisted YouTube or Vimeo links and external file URLs.

 https://db.gcve.eu/vuln/ghsa-3v4w-8jh3-gmw5 GHSA-3v4w-8jh3-gmw5 2026-11-10T03:52:32.323444+00:00

The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving it through its standalone player page and its download link, allowing unauthenticated visitors to obtain the media source of password-protected videos, such as unlisted YouTube or Vimeo links and external file URLs.