J.N. Breetvelt a.k.a. OpaJaap

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

J.N. Breetvelt a.k.a. OpaJaap records in CISA KEV

No J.N. Breetvelt a.k.a. OpaJaap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Photo Album Plus 6 records MEDIUM

Records

10 records

TI-2024-20749 CVE-2024-31377 · GHSA-wf67-xfgm-qgf4

WordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in J.N.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00542 Published 2024-05-13 No fix listed CWE-434

TI-2024-20662 CVE-2024-31286 · GHSA-5pm4-pf2x-jxw4

WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in J.N.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00862 Published 2024-04-07 Fixed in 8.6.03.005 CWE-434

TI-2024-10157 CVE-2024-10958 · GHSA-6422-rq87-298q

WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay

MEDIUM 41

The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 .

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01644 Published 2024-11-10 No fix listed CWE-94

TI-2023-27216 CVE-2023-49812 · GHSA-3vhq-cj93-8r2v

WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)

MEDIUM 40

Authorization Bypass Through User-Controlled Key vulnerability in J.N.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2023-12-19 No fix listed CWE-639

TI-2024-03766 CVE-2024-4037

WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution

LOW 33

The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.7.02.003.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00478 Published 2024-05-24 No fix listed CWE-94

TI-2024-24920 CVE-2024-37416 · GHSA-p688-8h8g-h467

WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in J.N.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00332 Published 2024-07-22 No fix listed CWE-79

TI-2023-27217 CVE-2023-49813 · GHSA-hq64-qw75-h6q8

WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J.N.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2023-12-14 No fix listed CWE-79

TI-2023-27184 CVE-2023-49774 · GHSA-q8m3-2vgv-qgh9

WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability

LOW 30

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00311 Published 2024-06-04 No fix listed CWE-200

TI-2021-07393 CVE-2021-25115 · GHSA-9f55-856w-xqjx

WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)

LOW 30

The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00683 Published 2022-02-14 Fixed in 8.0.10 CWE-79

TI-2024-25947 CVE-2024-38713 · GHSA-7c38-xxmq-vp5q

WordPress WP Photo Album Plus plugin <= 8.8.02.002 - Authenticated Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in J.N.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00275 Published 2024-07-20 No fix listed CWE-79

Open these records in search →

Critical	2
High	5
Medium	3
Low	0
No CVSS	0