CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120409
MEDIUMCVSS 5.3NVD feed
Published 9 November 2026 · tracked since 9 November 2026
Description
The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving it through its standalone player page and its download link, allowing unauthenticated visitors to obtain the media source of password-protected videos, such as unlisted You
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124684 MEDIUM 5.1
- CVE-2026-124591 MEDIUM 5.5
- CVE-2026-123460 HIGH 7.1
- CVE-2026-120838 MEDIUM 6.5
- CVE-2026-120367 HIGH 7.5
- CVE-2026-115252 CRITICAL 10
- CVE-2026-113702 MEDIUM 4.3
- CVE-2026-106466 HIGH 7.5
- CVE-2026-106008 MEDIUM 5.3
- CVE-2026-121764 HIGH 7.1