CVE-2026-52709: WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Q: What level of access and interaction are required to exploit this issue?

An attacker needs low-level privileges and a victim must interact with the malicious content. The attack can be performed over the network with low attack complexity.

Q: What is the likely impact if exploitation succeeds?

Successful exploitation can result in stored XSS and can affect confidentiality, integrity, and availability at a low level. The scope is changed, indicating the impact can extend beyond the initially vulnerable component.

Q: Which plugin versions are affected?

Video Gallery Block versions through 1.6.0 are affected. The available data does not identify a fixed version.

Published Oct 29, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video Gallery Block video-gallery-block allows Stored XSS.This issue affects Video Gallery Block: from n/a through 1.6.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/video-gallery-block to a version that resolves this vulnerability.
Fixed in 1.7.0

Frequently Asked Questions

What level of access and interaction are required to exploit this issue?

An attacker needs low-level privileges and a victim must interact with the malicious content. The attack can be performed over the network with low attack complexity.

What is the likely impact if exploitation succeeds?

Successful exploitation can result in stored XSS and can affect confidentiality, integrity, and availability at a low level. The scope is changed, indicating the impact can extend beyond the initially vulnerable component.

Which plugin versions are affected?

Video Gallery Block versions through 1.6.0 are affected. The available data does not identify a fixed version.

CVE-2026-52709: WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Remediation

Frequently Asked Questions

What level of access and interaction are required to exploit this issue?

What is the likely impact if exploitation succeeds?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access and interaction are required to exploit this issue?

What is the likely impact if exploitation succeeds?

Which plugin versions are affected?