WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-photo-album-plus
Published
2024-05-23
Title
WP Photo Album Plus < 8.7.00.004 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-photo-album-plus
Published
2024-06-28
Title
WP Photo Album Plus < 8.8.00.003 - Reflected Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2024-07-11
Title
WP Photo Album Plus < 8.8.02.003 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2024-10-16
Title
Wordpress Photo Album Plus < 8.8.07.004 - Reflected Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2024-11-10
Title
WP Photo Album Plus < 8.9.01.001 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
Slug
wp-photo-album-plus
Published
2025-10-03
Title
WP Photo Album Plus < 9.0.11.007 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
Slug
wp-photo-album-plus
Published
2026-01-06
Title
WP Photo Album Plus < 9.1.05.009 - Reflected Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2026-04-13
Title
WP Photo Album Plus < 9.1.08.002 - Unauthenticated SQL Injection
Slug
wp-photo-album-plus
Published
2026-04-27
Title
WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter
Slug
wp-photo-album-plus
Published
2026-06-17
Title
WP Photo Album Plus < 9.2.01.001 - Unauthenticated SQL Injection
Slug
wp-photo-album-plus
Published
2026-06-30
Title
WP Photo Album Plus < 9.2.01.001 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute
Slug
wp-photo-album-plus
Published
2026-06-30
Title
WP Photo Album Plus < 9.2.03.001 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2026-07-13
Title
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
Slug
wp-photo-album-plus
Published
2026-07-28
Title
WP Photo Album Plus < 9.2.04.003 - Authenticated (Administrator+) SQL Injection via 'table' Parameter
Slug
wp-photo-album-plus
Published
2026-08-03
Title
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips
Slug
wp-photo-album-plus
Published
2026-08-10
Title
WP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstart
Slug
wp-photo-album-plus
Published
2026-08-10
Title
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal
Slug
wp-photo-album-plus
Published
2026-08-10
Title
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
Slug
wp-photo-album-plus
Published
2026-08-10
Title
WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization
Slug
wp-photo-album-plus
Published
2026-09-23
Title
WP Photo Album Plus < 9.3.02.003 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2026-09-30
Title
WP Photo Album Plus < 9.3.03.002 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2026-09-10
Title
WP Photo Album Plus < 9.2.10.001 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-photo-album-plus
Published
2026-09-18
Title
WP Photo Album Plus < 9.3.01.003 - Subscriber+ RCE via Upload Filename ImageMagick Argument Injection
Slug
wp-photo-album-plus
Published
2026-10-09
Title
WP Photo Album Plus < 9.3.03.003 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Session History
Slug
wp-photo-album-plus
Published
2026-10-15
Title
WP Photo Album Plus < 9.3.02.003 - Subscriber+ RCE via 'value' Parameter in update-photo AJAX Action