CVE-2021-24970

PoC —

CVSS 3.1

7.2 high

EPSS

6%p93

Published

Dec 13, 2021 (Dec 13, 2021)

Modified

Jun 17, 2026

Description

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

Vendors: plugins360
Products: all-in-one video gallery
Ecosystems: WordPress
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.9%)

In the news0 stories

No ingested article mentions this CVE yet.