eMarket Design Video Gallery – YouTube Gallery, Playlist & Video Grid

• CVE-2026-15790 Medium 6.4 Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode 0.3%
• CVE-2026-12923 High 7.5 Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter 0.5%