Known Vulnerabilities for WP Photo Album Plus by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WP Photo Album Plus" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82656 json | Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users wit... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-82483 json | A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-57675 json | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-54829 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP P... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-18962 json | The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-18579 json | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_X_FORWARDED_FOR' para... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-18049 json | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its publi... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-18048 json | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file p... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-17014 json | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its publi... | Not Provided | 2026-08-09 | 2026-08-11 |
| CVE-2026-17013 json | The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into... | Not Provided | 2026-08-12 | 2026-08-12 |