https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T21:42:01.095951+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120409 CVE-2026-120409 — All-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via Player Page and Download Han… 2026-11-10T21:42:01.096802+00:00

Affected: Unknown All-in-One Video Gallery

The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving it through its standalone player page and its download link, allowing unauthenticated visitors to obtain the media source of password-protected videos, such as unlisted YouTube or Vimeo links and external file URLs.