WordPress Plugin Vulnerabilities

WP Photo Album Plus

2022-01-02

WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)

Fixed in version 8.0.10

2015-05-20

WP Photo Album Plus <= 6.1.2 - Stored Cross-Site Scripting (XSS)

Fixed in version 6.1.3

2014-11-24

WP Photo Album Plus 5.4.17 - Cross-Site Scripting (XSS)

Fixed in version 5.4.18

2014-09-28

WP Photo Album Plus 5.4.4 & 5.4.3 Cross-Site Scripting (XSS)

Fixed in version 5.4.5

2014-09-17

WP Photo Album Plus 5.4.5 - 5.4.8 Stored XSS

Fixed in version 5.4.8

2014-08-01

WP Photo Album Plus <= 4.1.1 - SQL Injection

Fixed in version 4.2.0

2014-08-01

WP Photo Album Plus < 4.8.12 - wp-photo-album-plus.php wppa-searchstring XSS

Fixed in version 4.8.12

2014-08-01

WP Photo Album Plus - Full Path Disclosure

Fixed in version 4.9.1

2014-08-01

WP Photo Album Plus - index.php wppa-tag Parameter XSS

Fixed in version 4.9.3

2014-08-01

WP Photo Album Plus - "commentid" Cross-Site Scripting

Fixed in version 5.0.3

2014-08-01

WP Photo Album Plus - wp-admin/admin.php edit_id Parameter XSS

Fixed in version 5.0.11