Known Vulnerabilities for WP Photo Album Plus by Unknown
Listed below are 7 of the newest known vulnerabilities associated with "WP Photo Album Plus" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57675 json | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-54829 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP P... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-39511 json | Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-15344 json | The WP Photo Album Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'table' parameter in all versions... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-14922 json | WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001 through a d... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-10095 json | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all ... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-6379 json | The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it ... | Not Provided | 2026-05-18 | 2026-05-18 |