WordPress Plugin Vulnerabilities

WP Photo Album Plus - "commentid" Cross-Site Scripting

Description

The WP Photo Album Plus WordPress plugin was affected by a "commentid" Cross-Site Scripting security vulnerability.

Affects Plugins

Plugin icon
wp-photo-album-plus
Fixed in 5.0.3

References

CVE
CVE-2013-3254

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
863c48d7-b370-4732-8732-915e00a0becd

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-06-07
Title
Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2014-08-01
Title
IgnitionDeck 1.1 - Purchase Form Unspecified XSS
Published
2021-12-20
Title
SEUR Oficial < 1.7.0 - Admin+ Stored Cross-Site Scripting
Published
2026-01-08
Title
Famous - Responsive Image And Video Grid Gallery WordPress <= 1.4 - Reflected Cross-Site Scripting
Published
2024-09-12
Title
Triton Lite <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode