Skip to content
Unknown WP Photo Album Plus
-
CVE-2026-110983
Medium 4.3
WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF
0.1%
-
CVE-2026-110981
High 7.1
WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter
0.2%
-
CVE-2026-18962
Medium 4.3
WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization
0.3%
-
CVE-2026-18049
High 7.5
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
0.4%
-
CVE-2026-18048
High 7.5
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal
0.4%
-
CVE-2026-17013
Medium 6.1
WP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstart
0.3%
-
CVE-2026-17014
Medium 5.3
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips
0.3%
-
CVE-2026-14922
Medium 6.1
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
0.3%
-
CVE-2026-6379
High 8.6
WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter
0.5%
-
CVE-2021-25115
Unrated
WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
0.7%