CVE-2026-19075
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
The All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any `aiovg_videos` post. It reads the post's `mp4` meta value and streams that URL's response back to the requester.
Risk Assessment
An unauthenticated attacker can download arbitrary video files referenced in meta data, potentially exposing confidential content.
Recommendation
Update the plugin to the latest version and restrict access to the download handler if possible.
Original NVD description (English source)
All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any `aiovg_videos` post (`public/video.php`, `AIOVG_Public_Video::download_video()`), which reads the post's `mp4` meta value and streams that URL's response back to the requester.