WordPress Plugin Vulnerabilities

WP Photo Album Plus - index.php wppa-tag Parameter XSS

Description

The WP Photo Album Plus WordPress plugin was affected by an index.php wppa-tag Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
wp-photo-album-plus
Fixed in 4.9.3

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
76534e35-3b2c-493a-b589-4ce98b8ca553

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-02-02
Title
Top Bar – PopUps – by WPOptin <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Published
2023-05-22
Title
Duplicator Pro < 4.5.11.1 - Unauthenticated Reflected XSS
Published
2025-03-04
Title
Stylish Google Sheet Reader < 4.1 - Reflected XSS
Published
2019-06-27
Title
360 Product Rotation <= 1.4.7 - Reflected XSS
Published
2022-09-29
Title
Contact Bank <= 3.0.30 - Admin+ Stored Cross-Site Scripting