{"id":"CVE-2026-118629","published":"2026-10-31T06:16:34.133","lastModified":"2026-10-31T06:16:34.133","description":"The All-in-One Video Gallery  WordPress plugin before 5.0.0 does not check a video's publication status before rendering it on its player page, allowing unauthenticated users to view the title and source URLs of private, draft, pending, scheduled and trashed videos by their ID.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/a17559f9-f2d6-434f-8dd0-db4d1d9766d2/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}