{"id":"CVE-2023-49774","aliases":["EUVD-2023-53697","GHSA-q8m3-2vgv-qgh9"],"status":"published","title":"WordPress WP Photo Album Plus plugin \u003c= 8.5.02.005 - IP Bypass vulnerability","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00311,"percentile":0.24239,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2024-06-04T11:23:29Z","modified":"2026-06-17T06:36:26Z","products":[{"vendor":"j.n. breetvelt a.k.a. opajaap","product":"wp photo album plus"},{"vendor":"opajaap","product":"wp photo album plus"},{"vendor":"wppa","product":"wp_photo_album_plus"}],"references":[{"url":"https://patchstack.com/database/vulnerability/wp-photo-album-plus/wordpress-wp-photo-album-plus-plugin-8-5-02-005-ip-bypass-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49774"},{"url":"https://github.com/advisories/GHSA-q8m3-2vgv-qgh9"}],"sources":{"cve":[{"id":"CVE-2023-49774","title":"WordPress WP Photo Album Plus plugin \u003c= 8.5.02.005 - IP Bypass vulnerability","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.","status":"published","published":"2024-06-04T11:23:29.421Z","modified":"2026-04-28T16:08:57.583Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:13.368958Z"}],"euvd":[{"id":"EUVD-2023-53697","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.","status":"published","published":"2024-06-04T11:23:29Z","modified":"2026-04-28T16:08:57Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:03.008698Z"}],"ghsa":[{"id":"GHSA-q8m3-2vgv-qgh9","title":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A....","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.","status":"published","published":"2024-06-04T12:31:04Z","modified":"2024-06-04T12:31:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:57:25.483683Z"}],"nvd":[{"id":"CVE-2023-49774","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.","status":"published","published":"2024-06-04T12:15:09.7Z","modified":"2026-06-17T06:36:26.31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}