Vendors / J.N. Breetvelt a.k.a. OpaJaap J.N. Breetvelt a.k.a. OpaJaap Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now J.N. Breetvelt a.k.a. OpaJaap records in CISA KEV No J.N. Breetvelt a.k.a. OpaJaap vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 .
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.01644 · Published 2024-11-10 · No fix listed CWE-94
Priority MEDIUM 40
Authorization Bypass Through User-Controlled Key vulnerability in J.N.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00533 · Published 2023-12-19 · No fix listed CWE-639
Priority LOW 33
The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.7.02.003.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00478 · Published 2024-05-24 · No fix listed CWE-94
Priority LOW 31
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in J.N.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00332 · Published 2024-07-22 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J.N.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00393 · Published 2023-12-14 · No fix listed CWE-79
Priority LOW 30
The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00683 · Published 2022-02-14 · Fixed in 8.0.10 CWE-79
Open these records in search → All records by CVSS severity
2 5 3 0 0
THREATIST.IORead the docs