CVE-2025-14947 | All-in-One Video Gallery Plugin up to 4.6.4 on WordPress ajax_callback_create_bunny_stream_video authorization

A vulnerability was found in All-in-One Video Gallery Plugin up to 4.6.4 on WordPress. It has been rated as critical. This affects the function ajax_callback_create_bunny_stream_video. Performing a manipulation results in missing authorization.

This vulnerability is identified as CVE-2025-14947. The attack can be initiated remotely. There is not any exploit available.