Skip to content
OpenAdvisories

Vendor

Galaxy Weblinks

7 known vulnerabilities.

Products

Video Playlist For YouTube 2 WP Clone any post type 2 Gallery with thumbnail slider 2 Post Featured Video 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-5092

    Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library

    Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. Thi…

    WP Royal vowelweb Galaxy Weblinks oxilab Web / CMS
  • Medium 4.3
    CVE-2025-60137

    WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through <= 1.7.

    Galaxy Weblinks Post Featured Video
  • Medium 6.5
    CVE-2025-32183

    WordPress Video Playlist For YouTube plugin <= 6.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through <= 6.…

    Galaxy Weblinks Video Playlist For YouTube
  • Medium 4.7
    CVE-2025-31871

    WordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through <= 3.6.

    Galaxy Weblinks WP Clone any post type
  • Medium 5.3
    CVE-2025-31872

    WordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through <= 3.6.

    Galaxy Weblinks WP Clone any post type
  • Medium 4.3
    CVE-2023-45653

    WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions.

    Galaxy Weblinks Video Playlist For YouTube
  • Medium 5.4
    CVE-2022-42485

    WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <= 6.0 versions.

    Galaxy Weblinks Gallery with thumbnail slider