CVE-2026-10104 | nikhilgadhiya Product Video Gallery for Woocommerce Plugin up to 1.5.1.8 on WordPress custom_thumbnail cross site scripting

SecurityVulns
Yanac

A vulnerability was found in nikhilgadhiya Product Video Gallery for Woocommerce Plugin up to 1.5.1.8 on WordPress. It has been declared as problematic. The impacted element is an unknown function. The manipulation of the argument custom_thumbnail results in cross site scripting.

This vulnerability is reported as CVE-2026-10104. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More