Known vulnerabilities in Video Gallery – YouTube Playlist, Channel Gallery by YotuWP

Modern responsive YouTube video gallery helps your website getting noticed from visitors, increase the reach and stand out from the competitors.

5Reported vulnerabilities

9.8Highest CVSS score

1.3.14Latest version

20,000+Active installs

What to do now

Update Video Gallery – YouTube Playlist, Channel Gallery by YotuWP to 1.3.14 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 25, 2024 / Tested up to WordPress: 6.2.11 / View on wordpress.org

This plugin has not been updated in over two years. New vulnerabilities may never be fixed. Consider an alternative.

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-4551	High 8.8	0.6%	Before 1.3.14	`1.3.14`	June 15, 2024
CVE-2024-4258	Critical 9.8	0.8%	Before 1.3.14	`1.3.14`	June 15, 2024
CVE-2022-35726	Critical 9.8	0.7%	Before 1.3.5	`1.3.5`	August 23, 2022
WF-fdd14863-5498-4598-8b22-8e5a607869e4	Medium 5.5	—	1.3.10 and earlier	`1.3.11`	December 8, 2022
CVE-2023-25477	Medium 4.4	0.4%	1.3.12 and earlier	`1.3.13`	July 7, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.