CVE-2023-25988 – Video Gallery – YouTube Gallery <= 1.7.6 - Missing Authorization

https://notcve.org/view.php?id=CVE-2023-25988

The Video Gallery – YouTube Gallery plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 1.7.6 via the 'Total-Soft-Gallery-Video-Ajax.php' file due to a lack of capability and nonce checks on multiple functions. This allows unauthenticated attackers to retrive, edit, and delete videos. • CWE-862: Missing Authorization •