Login Request a demo
WP
Product
WP Photo Album Plus
by J.N. Breetvelt a.k.a. OpaJaap · last CVE Jul 22, 2024
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 2High 1Medium 4Low 0
Severity
All severities7Critical2High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Photo Album Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-31377
10.0
1%
May 13
WordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability
Affected: through 8.7.01.001
CVE-2024-31286
9.9
1%
Apr 7
WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability
Affected: before 8.6.03.005
CVE-2023-49812
7.5
1%
Dec 19
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)
Affected: through 8.5.02.005
CVE-2024-38713
6.5
0%
Jul 20
WordPress WP Photo Album Plus plugin <= 8.8.02.002 - Authenticated Stored Cross Site Scripting (XSS) vulnerability
Affected: through 8.8.02.002
CVE-2024-37416
6.1
0%
Jul 22
WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 8.8.00.002
CVE-2023-49813
6.1
0%
Dec 14
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)
Affected: through 8.5.02.005
CVE-2023-49774
5.3
0%
Jun 4
WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability
Affected: through 8.5.02.005
Showing 7