CVE

CVE-2021-24970

7.2

CVSS

Description

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

Attack Vector

Privileges Req.

User Interaction

all-in-one video gallery

Updated Oct 12, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24970 Scanner

Detects 'Local File Inclusion (LFI)' vulnerability in All-In-One Video Gallery plugin for WordPress affects v. before 2.5.0.

Used 3.3k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: all-in-one video gallery

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →