Galaxy Weblinks vulnerabilities

Products

• Video Playlist For YouTube 2
• WP Clone any post type 2
• Gallery with thumbnail slider 1
• Post Featured Video 1

Latest Galaxy Weblinks CVEs

Newest publication first

1. CVE-2025-60137 WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability

   Published 2025-09-26

   Medium·CVSS 4.3 EPSS 0.14%

   Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through <= 1.7.

2. CVE-2025-32183 WordPress Video Playlist For YouTube plugin <= 6.7.1 - Cross Site Scripting (XSS) vulnerability

   Published 2025-04-04

   Medium·CVSS 6.5 EPSS 0.41%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playlist For YouTube: from n/a through <= 6.7.1.

3. CVE-2025-31871 WordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability

   Published 2025-04-01

   Medium·CVSS 4.7 EPSS 0.36%

   URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through <= 3.6.

4. CVE-2025-31872 WordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerability

   Published 2025-04-01

   Medium·CVSS 5.3 EPSS 0.38%

   Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through <= 3.6.

5. CVE-2023-45653 WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-10-16

   High·CVSS 8.8 EPSS 0.26%

   Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions.

6. CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-03-21

   Medium·CVSS 5.4 EPSS 0.38%

   Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <= 6.0 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.