WordPress Plugin Vulnerabilities

WP Photo Album Plus 5.4.5 - 5.4.8 Stored XSS

Description

The WP Photo Album Plus WordPress plugin was affected by a 5.4.8 Stored XSS security vulnerability.

Affects Plugins

Plugin icon
wp-photo-album-plus
Fixed in 5.4.8

References

URL
https://vexatioustendencies.com/stored-xss-in-wp-photo-album-plus-5-4-5/
URL
https://vexatioustendencies.com/wordpress-plugin-vulnerability-dump-part-1/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
admin
Verified
No
WPVDB ID
cc03812f-c60e-4c83-a8f5-e4567a96d65c

Timeline

Publicly Published
2014-09-17 (about 11 years ago)
Added
2014-09-17 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-07
Title
Urdu Formatter – Shamil <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-02-23
Title
Small Package Quotes – Unishippers Edition < 2.4.10 - Reflected Cross-Site Scripting
Published
2025-12-15
Title
VK Google Job Posting Manager < 1.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-15
Title
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.24 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2024-09-30
Title
WPCOM Member < 1.5.4.1 - Reflected Cross-Site Scripting