https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-2065.htmlhttps://patchthecve.com/cve/CVE-2015-2065.htmlWed, 17 Jun 2026 00:23:32 +0000HIGH 7.5: SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php.https://patchthecve.com/cve/CVE-2014-9098.htmlhttps://patchthecve.com/cve/CVE-2014-9098.htmlWed, 17 Jun 2026 00:17:45 +0000LOW 3.5: Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to (1) videoads/videoadhttps://patchthecve.com/cve/CVE-2014-9097.htmlhttps://patchthecve.com/cve/CVE-2014-9097.htmlWed, 17 Jun 2026 00:17:45 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow (1) remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.phphttps://patchthecve.com/cve/CVE-2013-3478.htmlhttps://patchthecve.com/cve/CVE-2013-3478.htmlTue, 16 Jun 2026 23:55:15 +0000HIGH 7.5: SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.