Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 12 min 142 bronnen 1 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-120409

MEDIUM · 5.3 CVSS Gepubliceerd: CWE-200

Beschrijving

The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving it through its standalone player page and its download link, allowing unauthenticated visitors to obtain the media source of password-protected videos, such as unlisted YouTube or Vimeo links and external file URLs.

References