File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. All-In-One Video Gallery <=2.6.0 - Server-Side Request ForgeryCVE-2022-2633plugins360 · CVSS 7.5 · 36% likely

   CWE-22

2. WordPress All-In-One Video Gallery <2.5.0 - Local File InclusionCVE-2021-24970Plugins360 · 5.0% likely

   CWE-22

3. All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured imageCVE-2024-4033plugins360 · CVSS 8.8 · 1.6% likely

   CWE-434

4. All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload BypassCVE-2025-12957plugins360 · CVSS 8.8 · 0.7% likely

   CWE-434

5. All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form ShortcodeCVE-2024-4670plugins360 · CVSS 8.8 · 0.6% likely

   CWE-98

6. All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIPCVE-2025-12966plugins360 · CVSS 8.8 · 0.6% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.