Non notée
CVE-2021-25115 The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS)
Description
The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log content was handled improperly, therefore any user, even unauthenticated, could cause arbitrary javascript to be executed in the admin panel.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Photo Album Plus 8.0 | premières → < 8.0.10 | 8.0.10 |
Autres CVE de WP Photo Album Plus
Les 10 CVE de WP Photo Album Plus →
CVE-2026-110983
The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its…
4.3
Moyenne
CVE-2026-110981
The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before…
7.1
Élevée
CVE-2026-18962
The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload…
4.3
Moyenne
CVE-2026-18049
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of…
7.5
Élevée