Known Vulnerabilities for Ez Album by Scriptsez
Listed below are 1 of the newest known vulnerabilities associated with "Ez Album" by "Scriptsez".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84047 json | The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a ... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-82656 json | Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users wit... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-82483 json | A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-72591 json | A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the se... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-64969 json | ATutor is vulnerable to Insecure Direct Object Reference (IDOR) attack in profile picture related endpoints. Any authenticat... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-59258 json | immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows s... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-57675 json | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-54829 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP P... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-48559 json | Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to ex... | Not Provided | 2026-06-01 | 2026-07-14 |
| CVE-2026-18962 json | The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the... | Not Provided | 2026-08-12 | 2026-08-12 |