Skip to content
OpenAdvisories
High · 7.6 CVE-2023-45069 EUVD-2023-49390GHSA-h2w6-c2hx-7jcf

WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection

Published Nov 6, 2023 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery – Best WordPress YouTube Gallery Plugin: from n/a through 2.1.3.

Affected products

VendorProductAffectedFixed
Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin ≤ 2.1.3 —

References