All vulnerabilities
CVE-2026-19075
Medium
CVSS 5.0
SSRF in All-in-One Video Gallery
| Vendor | PluginsWare |
|---|---|
| Product | All-in-One Video Gallery |
| Affected versions | < 4.9.2 |
| Weakness | CWE-918 |
| Reported | 2026-08-07 |
| Disclosed | 2026-08-07 |
| Status | Published |
Discovered and responsibly disclosed CVE-2026-19075, a Server-Side Request Forgery (SSRF) vulnerability affecting the All-in-One Video Gallery WordPress plugin versions < 4.9.2.
The vulnerability affects the plugin's video download functionality and allows a Subscriber-level authenticated user to influence server-side requests through the vdl parameter.
The research identified two independent bypass techniques against the SSRF protection introduced in version 4.9.0, including a same-host alternate-port bypass and a DNS rebinding-based bypass.
The vulnerability was independently verified and published by WPScan.
Original Researcher: Mohammed Abd Alrahman
CVE: CVE-2026-19075
CWE: CWE-918
CVSS: 5.0 (Medium)
Status: Verified
The vulnerability affects the plugin's video download functionality and allows a Subscriber-level authenticated user to influence server-side requests through the vdl parameter.
The research identified two independent bypass techniques against the SSRF protection introduced in version 4.9.0, including a same-host alternate-port bypass and a DNS rebinding-based bypass.
The vulnerability was independently verified and published by WPScan.
Original Researcher: Mohammed Abd Alrahman
CVE: CVE-2026-19075
CWE: CWE-918
CVSS: 5.0 (Medium)
Status: Verified
Related disclosures
High
Simple Shopping Cart < 5.3.3 – Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient
Medium
Elementor < 4.3.5 – Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass
Low
Code Snippets < 3.10.0 – Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet
Low
The Events Calendar 6.15.16.1 – 6.17.4.1 – Contributor+ Event/Venue/Organizer Update, Trash and Ownership Takeover via by-slug REST Routes
View all