WordPress Plugin Vulnerabilities

Easy Photo Album <= 1.1.5 - Album Information Disclosure

Description

The Easy Photo Album WordPress plugin was affected by an Album Information Disclosure security vulnerability.

Affects Plugins

Plugin icon
easy-photo-album
Fixed in 1.1.6

References

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
3d5630be-2d6e-4f61-a7a0-dd4d31b5645c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2025-06-05
Title
PayU CommercePro Plugin < 3.8.8 - Authentication Bypass
Published
2023-10-25
Title
Admin and Site Enhancements (ASE) < 5.8.0 - Password Protection Mode Security Feature Bypass
Published
2024-05-28
Title
AppPresser < 4.4.0 - Improper Missing Encryption Exception Handling to Authentication Bypass
Published
2025-12-15
Title
WPCOM Member < 1.7.17 - Authentication Bypass via Weak OTP
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 wp-includes/capabilities.php Remote Authenticated Administrator Delete Action Bypass