VulnSocial

CVE-2026-1706Disclosure

LOWCVSS 6.1 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-03-04: 4Technical Details · 2026-03-04: 403-04
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-1706 The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 due… https://www.cve.org/CVERecord?id=CVE-2026-1706

    Post summary

    The All‑in‑One Video Gallery WordPress plugin (v4.7.1 and earlier) is susceptible to a reflected XSS via the 'vi' parameter, with no PoC, exploit, or patch information provided.

    00010377
    56.6K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-1706 📊 Severity: 6.1 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1706 #CVE-2026-1706 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/OsJLa1a4OU

    Post summary

    The tweet announces a new CVE (CVE-2026-1706) affecting WordPress, citing its severity score of 6.1, risk level, and linking to the NVD record.

    0000031
    64 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-1706 Reflected XSS in WordPress All-in-One Video Gallery Plugin via 'vi' Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1706

    Post summary

    A Reflected XSS vulnerability (CVE-2026-1706) was identified in the WordPress All‑in‑One Video Gallery plugin, exploitable via the 'vi' parameter.

    0000038
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-1706 The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter in all versions up to, and including, 4.7.1 due… https://www.cve.org/CVERecord?id=CVE-2026-1706 ----- Traducción: CVE-2026-1706 El … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-1706, describing a reflected XSS flaw in the All‑in‑One Video Gallery plugin’s 'vi' parameter for versions up to 4.7.1, with no PoC, exploit, active exploitation, patch, or debunking information provided.

    0000029
    55 followersView on X

Explore more

Back to dashboard