WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-photo-album-plus
Published
2014-09-28
Title
WP Photo Album Plus 5.4.4 & 5.4.3 Cross-Site Scripting (XSS)
Slug
wp-photo-album-plus
Published
2014-11-24
Title
WP Photo Album Plus 5.4.17 - Cross-Site Scripting (XSS)
Slug
wp-photo-album-plus
Published
2015-05-20
Title
WP Photo Album Plus <= 6.1.2 - Stored Cross-Site Scripting (XSS)
Slug
wp-photo-album-plus
Published
2022-01-02
Title
WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
Slug
wp-photo-album-plus
Published
2023-12-05
Title
WP Photo Album Plus < 8.6.01.005 - Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2023-12-05
Title
WP Photo Album Plus < 8.6.01.003 - Insecure Direct Object Reference
Slug
wp-photo-album-plus
Published
2023-12-05
Title
WP Photo Album Plus < 8.6.01.005 - IP Spoofing
Slug
wp-photo-album-plus
Published
2024-04-05
Title
WP Photo Album Plus < 8.6.03.005 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-photo-album-plus
Published
2024-05-07
Title
WP Photo Album Plus < 8.7.01.002 - Unauthenticated Arbitrary File Upload
Slug
wp-photo-album-plus
Published
2024-05-23
Title
WP Photo Album Plus < 8.7.00.004 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-photo-album-plus
Published
2024-06-28
Title
WP Photo Album Plus < 8.8.00.003 - Reflected Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2024-07-11
Title
WP Photo Album Plus < 8.8.02.003 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2024-10-16
Title
Wordpress Photo Album Plus < 8.8.07.004 - Reflected Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2024-11-10
Title
WP Photo Album Plus < 8.9.01.001 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
Slug
wp-photo-album-plus
Published
2025-10-03
Title
WP Photo Album Plus < 9.0.11.007 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
Slug
wp-photo-album-plus
Published
2026-01-06
Title
WP Photo Album Plus < 9.1.05.009 - Reflected Cross-Site Scripting
Slug
wp-photo-effects
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-photo-effects
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-photo-effects
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-photo-effects
Published
2025-10-02
Title
WP Photo Effects <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-photo-sphere
Published
2025-01-16
Title
WP Photo Sphere <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-photo-text-slider-50
Published
2023-10-30
Title
Wp photo text slider 50 < 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
wp-photo-text-slider-50
Published
2024-12-13
Title
Wp photo text slider 50 <= 8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-photonav
Published
2025-06-25
Title
WP-PhotoNav <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photonav Shortcode
Slug
wp-php-widget
Published
2014-08-01
Title
WP PHP Widget 1.0.2 - Full Path Disclosure