https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:14:22 +0000 https://cve.radiocsirt.org/vuln/cve-2025-14947 <p><strong>Affected:</strong> plugins360 All-in-One Video Gallery</p> <p>The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_callback_create_bunny_stream_video`, `ajax_callback_get_bunny_stream_video`, and `ajax_callback_delete_bunny_stream_video` functions in all versions up to, and including, 4.6.4. This makes it possible for unauthenticated attackers to create and delete videos on the Bunny Stream CDN associated with the victim&#39;s account, provided they can obtain a valid nonce which is exposed in public player templates.</p> <p><strong>Affected:</strong> plugins360 All-in-One Video Gallery</p> <p>The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_callback_create_bunny_stream_video`, `ajax_callback_get_bunny_stream_video`, and `ajax_callback_delete_bunny_stream_video` functions in all versions up to, and including, 4.6.4. This makes it possible for unauthenticated attackers to create and delete videos on the Bunny Stream CDN associated with the victim&#39;s account, provided they can obtain a valid nonce which is exposed in public player templates.</p> https://cve.radiocsirt.org/vuln/cve-2025-14947