Medium · 5.4 CVE-2023-40558 EUVD-2023-45129GHSA-pc69-27xc-h4rv

WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Published Oct 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.3.5 versions.

Vendor	Product	Affected	Fixed
eMarket Design	YouTube Video Gallery by YouTube Showcase	≤ 3.3.5	—