CVE-2026-109209 | plugins360 All-in-One Video Gallery Plugin up to 4.9.7 on WordPress Input Sanitization save_meta_data embedcode cross site scripting (EUVD-2026-111564)

October 28, 2026 Yanac

A vulnerability classified as problematic has been found in plugins360 All-in-One Video Gallery Plugin up to 4.9.7 on WordPress. Affected is the function save_meta_data of the component Input Sanitization. This manipulation of the argument embedcode causes cross site scripting.

This vulnerability is tracked as CVE-2026-109209. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More