WordPress Plugin Vulnerabilities

WP Photo Album Plus - Full Path Disclosure

Description

The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability.

Affects Plugins

Plugin icon
wp-photo-album-plus
Fixed in 4.9.1

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
822f2c3b-2b5b-40a8-b18b-47de228caf30

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-10-18 (about 10 years ago)

Other

Published
Title
Published
2021-10-05
Title
Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure
Published
2014-08-01
Title
sintic_gallery - Path Disclosure
Published
2014-08-01
Title
ripe-hd-player 1.0 - Multiple Script Direct Request Path Disclosure
Published
2014-08-01
Title
Music - Multiple Script Direct Request Path Disclosure
Published
2018-03-02
Title
File Manager < 5.0.2 - Information Disclosure