WP
Product
WP Photo Album Plus
12
CVEs
0
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 7Medium 4Low 0
Watch
Add WP Photo Album Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10095 | 6.4 | Jul 1 | WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute Affected: through 9.1.13.005 |
| CVE-2024-9951 | 6.1 | Oct 17 | Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting Affected: through 8.8.05.003 |
| CVE-2025-8726 | 5.4 | Oct 4 | WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload Affected: through 9.0.11.006 |
| CVE-2026-15344 | 4.9 | Jul 29 | WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter Affected: through 9.2.04.002 |
Showing 4