Rio Video Gallery
Rio Video Gallery has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Rio Video Gallery has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Abdi Pranata. Rio Video Gallery is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.8.15.
CVE-2025-31566Rio Video Gallery <= 2.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Rio Video Gallery
Author
riosisgroup
A powerful Video Gallery plugin that allows you to embed videos from YouTube, Vimeo and Dailymotion through categories. You can manage them through a neat and user-friendly settings panel. Also included a help section for your reference. Features Embed videos from YouTube, Vimeo and Dailymotion Easy to install and use. Works with your theme’s files and UI style. You can style as you need. A complete help guide for your support. Responsive & latest UI. Two types of layouts. View videos in popup view. Can order videos as you need with numbers. Shortcode for full gallery, categorised gallery and single video. Customizable video thumbnail and player size.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C