All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

81 Quality Score

Active Installs

19/30

At 20,000 active installs it is a mid-tier plugin, well behind the 100,000-install alternatives but with enough adoption to be considered proven in production.

Update Freshness

25/25

Updated June 2026 and tested against WordPress 7.0, the plugin is clearly maintained on a current release cadence, which earns a perfect maintenance score.

User Rating

14/15

A 96/100 rating from 134 reviewers is an excellent signal, with very few complaints given the sample size.

Support Health

8/15

Only 2 support threads exist and both are resolved, but the tiny thread count means there is not much public support history to evaluate, capping the score at the midpoint.

WP Compatibility

15/15

Tested with WordPress 7.0 and requiring PHP 5.6.20, the plugin covers a broad range of modern hosting environments, which is why compatibility scores a perfect 100.

Scores higher than 84% of indexed plugins

About

Video gallery plugin for WordPress with a built-in HTML5 player. Embed YouTube, Vimeo, Dailymotion, Rumble, and self-hosted videos.

Active Installs 20k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-22 6:13am GMT

Requires WordPress 6.3+

Tested Up To 7.1.2

Requires PHP 5.6.20+

Security History

15 known vulnerabilities, all patched

6 High 9 Medium

Most recent: August 7, 2026

View details ▸

All-in-One Video Gallery <= 4.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery Medium

August 7, 2026 Patched in ["4.9.2"] CVE-2026-19075

All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter Medium

July 9, 2026 Patched in ["4.9.0"] CVE-2026-12123

All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameter Medium

March 3, 2026 Patched in ["4.7.5"] CVE-2026-1706

All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited User Meta Update Medium

January 23, 2026 Patched in ["4.7.1"] CVE-2025-15516

All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion Medium

January 22, 2026 Patched in ["4.7.1"] CVE-2025-14947

All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass High

January 15, 2026 Patched in ["4.6.4"] CVE-2025-12957

All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIP High

December 5, 2025 Patched in ["4.6.4"] CVE-2025-12966

All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode Medium

July 23, 2024 Patched in ["3.8.3"] CVE-2024-6629

All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode High

May 14, 2024 Patched in ["3.7.0"] CVE-2024-4670

All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image High

May 1, 2024 Patched in ["3.6.5"] CVE-2024-4033

All-in-One Video Gallery <= 3.5.2 - Missing Authorization Medium

April 5, 2024 Patched in ["3.6.0"] CVE-2024-31248

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Medium

July 18, 2023 Patched in ["3.4.3"] CVE-2023-33999

All-in-One Video Gallery 2.5.8 - 2.6.0 - Arbitrary File Download & Server-Side Request Forgery High

August 17, 2022 Patched in ["2.6.1"] CVE-2022-2633

Freemius SDK <= 2.4.2 - Missing Authorization Checks Medium

March 4, 2022 Patched in ["2.5.4"] CVE-2022-4974

All-In-One-Gallery <= 2.4.9 - Admin+ Local File Inclusion High

November 15, 2021 Patched in ["2.5.0"] CVE-2021-24970

What It Does

All-in-One Video Gallery lets WordPress site owners build video galleries using a built-in HTML5 player or by embedding content from YouTube, Vimeo, Dailymotion, and Rumble. It supports self-hosted MP4 files alongside third-party sources, giving you one interface for mixing hosted and external video content. The plugin handles the gallery structure, playback, and shortcode/block output so you do not need separate players for each video source.

Who It's For

This plugin fits small to mid-sized sites that need a single library for videos pulled from multiple sources, such as course creators mixing YouTube lessons with self-hosted demos, real estate agents hosting property tours, churches reposting sermon archives, and videographers building portfolio pages. It is well suited to anyone who wants gallery features without paying for a premium player subscription.

Who Should Skip It

If your library is 100% YouTube content and you want channel sync, live streams, or advanced lazy loading, a dedicated YouTube plugin like Feeds for YouTube or Embed Plus will serve you better. Large publishers or membership sites needing DRM, paywall integration, or adaptive bitrate streaming should look at Presto Player or a full video platform instead.

The Bottom Line

All-in-One Video Gallery is a dependable, actively maintained choice for sites that need to mix self-hosted videos with embeds from several third-party platforms, and it is priced right as a free option. It loses points only on popularity scale and the thin public support history, so very large or mission-critical deployments should validate it on a staging site first. For its target use cases, it earns an 81.16/100 quality score with confidence.

Pick this if you need to pull entire YouTube channels or playlists automatically and want stronger YouTube-specific features.

Presto Player 84/100

Pick this if you need advanced player controls, membership or LMS integration, and analytics on video engagement.

Modula Image Gallery – Photo Grid & Video Gallery 84/100

Pick this if your priority is highly visual, customizable grid layouts for mixed image and video galleries.

Embed Plus for YouTube Gallery, Livestream and Lazy Loading with Facades 84/100

Pick this if you want YouTube live streams, galleries, and lazy-loading facades for performance.

SimpLy Gallery 83/100

Pick this if you want a simpler Gutenberg-block-based gallery workflow and do not need the multi-source flexibility.