| CVE-2026-110983 |
The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its…
|
4.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-110981 |
The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before…
|
7.1
Élevée
|
18 oct. 2026 |
| CVE-2026-18962 |
The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload…
|
4.3
Moyenne
|
12 août 2026 |
| CVE-2026-17013 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it…
|
6.1
Moyenne
|
12 août 2026 |
| CVE-2026-18048 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a…
|
7.5
Élevée
|
12 août 2026 |
| CVE-2026-18049 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of…
|
7.5
Élevée
|
12 août 2026 |
| CVE-2026-17014 |
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of…
|
5.3
Moyenne
|
9 août 2026 |
| CVE-2026-14922 |
WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001…
|
6.1
Moyenne
|
31 juil. 2026 |
| CVE-2026-6379 |
The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before…
|
8.6
Élevée
|
18 mai 2026 |
| CVE-2021-25115 |
The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS)
|
Non notée
|
14 févr. 2022 |