Products: 1
Vulnerabilities: 11
Known Exploited: 0
1
Critical Level Threats
6
High Level Threats
4
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-92115
WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action
Last Modified: Oct 23, 2026
Published: Oct 16, 2026
CVE-2026-96278
WP Photo Album Plus <= 9.3.03.002 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Session History
Last Modified: Oct 20, 2026
Published: Oct 10, 2026
CVE-2026-87909
WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection
Last Modified: Sep 20, 2026
Published: Sep 19, 2026
CVE-2026-18579
WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting
Last Modified: Sep 11, 2026
Published: Sep 11, 2026
CVE-2026-15344
WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter
Last Modified: Jul 29, 2026
Published: Jul 29, 2026
Items Per Page
