Plugin icon

Video Gallery – YouTube Gallery, Playlist & Video Grid

youtube-showcase

Vulnerabilities:

7

Last Updated:

September 13, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-08-15
Title
Video Gallery < 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode
Fixed in
Fixed in 4.0.5
CVSS
5.5 (medium)
Published
2026-06-30
Title
Video Gallery < 4.0.4 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
Fixed in
Fixed in 4.0.4
CVSS
7.5 (high)
Published
2026-04-15
Title
Video Gallery – YouTube Gallery & Responsive Video Playlist < 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.5.2
CVSS
5.5 (medium)
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.5.1
CVSS
6.4 (medium)
Published
2025-08-25
Title
YouTube Showcase < 3.5.2 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.5.2
CVSS
8.1 (high)
Published
2024-05-20
Title
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress < 3.4.0 - Missing Authorization to Arbitrary Post/Page Creation
Fixed in
Fixed in 3.4.0
CVSS
5.3 (medium)
Published
2023-08-16
Title
Video Gallery & Management < 3.3.6 - Settings Update via CSRF
Fixed in
Fixed in 3.3.6
CVSS
4.3 (medium)