Vulnerabilities

TI-2026-84987 CVE-2026-119477 · GHSA-q45c-9cwx-46jr

Stored cross-site scripting in WordPress WP Photo Album Plus plugin

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00146 Published 2026-11-04 No fix listed CWE-79

TI-2026-65381 CVE-2026-102386 · GHSA-8hm3-h48x-53gm

LOW 28

Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00205 Published 2026-09-30 No fix listed CWE-79

TI-2026-63133 CVE-2026-93774 · GHSA-gr68-gpq9-6mj6

LOW 31

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-09-23 No fix listed CWE-79

TI-2026-41499 CVE-2026-57675 · GHSA-q6wq-9wp2-44h8

LOW 31

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-02 No fix listed CWE-79

TI-2026-39632 CVE-2026-54829 · GHSA-cr8m-2vj9-r7h2

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0032 Published 2026-06-25 No fix listed CWE-89

TI-2026-28485 CVE-2026-39511 · GHSA-984x-crwg-rm3r

MEDIUM 46

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00295 Published 2026-06-15 No fix listed CWE-89