| CVE-2026-110983 |
The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its…
|
4.3
Medium
|
Oct 29, 2026 |
| CVE-2026-110981 |
The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before…
|
7.1
High
|
Oct 18, 2026 |
| CVE-2026-18962 |
The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload…
|
4.3
Medium
|
Aug 12, 2026 |
| CVE-2026-17013 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it…
|
6.1
Medium
|
Aug 12, 2026 |
| CVE-2026-18048 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a…
|
7.5
High
|
Aug 12, 2026 |
| CVE-2026-18049 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of…
|
7.5
High
|
Aug 12, 2026 |
| CVE-2026-17014 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of…
|
5.3
Medium
|
Aug 9, 2026 |
| CVE-2026-14922 |
WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001…
|
6.1
Medium
|
Jul 31, 2026 |
| CVE-2026-6379 |
The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before…
|
8.6
High
|
May 18, 2026 |
| CVE-2021-25115 |
The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS)
|
Not rated
|
Feb 14, 2022 |