Known Vulnerabilities for WP Photo Album Plus by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WP Photo Album Plus" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116210 json | Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote att... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-115613 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image Gallery ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-110983 json | The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its comm... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-110981 json | The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflec... | Not Provided | 2026-10-18 | 2026-10-18 |
| CVE-2026-102386 json | Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-96278 json | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in ... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-93774 json | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions. | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-92115 json | The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and incl... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-87909 json | The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_magick... | Not Provided | 2026-09-19 | 2026-09-19 |
| CVE-2026-82656 json | Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users wit... | Not Provided | 2026-08-30 | 2026-08-31 |