plugins360 all-in-one video gallery

Name: plugins360 all-in-one video gallery
Brand: plugins360

productUS

cpe:2.3:a:plugins360:all-in-one_video_gallery:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical3high1medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-2633US	high8.2	33.8% (98th)	—	no fix	2022-09-06	2.5.8 → 2.6.0
CVE-2021-24970US	high7.2	5.01% (92nd)	—	2.5.0	2021-12-13	< 2.5.0
CVE-2024-31248US	high8.8OT elevated	0.38% (31st)	—	3.6.0	2024-06-09	< 3.6.0
CVE-2024-6629US	medium5.4	0.33% (26th)	—	3.8.3	2024-07-24	< 3.8.3

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-610Externally Controlled Reference to a Resource in Another Sphere1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.