Plugin icon

Dzs Videogallery

dzs-videogallery

Vulnerabilities:

13

Last Updated:

April 4, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-01-12
Title
DZS Video Gallery < 12.40 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 12.40
CVSS
6.5 (medium)
Published
2025-05-22
Title
DZS Video Gallery < 12.40 - Reflected Cross-Site Scripting
Fixed in
Fixed in 12.40
CVSS
6.1 (medium)
Published
2025-05-21
Title
DZS Video Gallery < 12.40 - Authenticated (Subscriber+) PHP Object Injection
Fixed in
Fixed in 12.40
CVSS
8.8 (high)
Published
2025-05-20
Title
DZS Video Gallery < 12.40 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 12.40
CVSS
9.8 (critical)
Published
2016-03-11
Title
DZS Videogallery Plugin <= 8.60 - Multiple Vulnerabilities
Fixed in
Fixed in 8.61
CVSS
n/a
Published
2014-09-27
Title
DZS Video Gallery Plugin - RCE & More
Fixed in
Fixed in 7.95
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery - deploy/preview_skin_overlay.swf logoLink Parameter Reflected XSS
Fixed in
Fixed in 7.95
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery - preview_skin_rouge.swf logoLink Parameter Reflected XSS
Fixed in
Fixed in 7.95
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery - upload.php File Upload Remote Code Execution
Fixed in
Fixed in 9.64
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery - preview_allchars.swf logoLink Parameter Reflected XSS
Fixed in
Fixed in 7.95
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery - deploy/preview.swf logoLink Parameter Reflected XSS
Fixed in
Fixed in 7.95
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery - ajax.php source Parameter Reflected XSS
Fixed in
Fixed in 9.64
CVSS
n/a
Published
2014-08-01
Title
DZS Video Gallery 3.1.3 - Remote File Disclosure
Fixed in
Fixed in 7.95
CVSS
n/a