Skip to content
Opajaap vulnerabilities
Newest
-
jacob n. breetvelt wp photo album plus
WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability
CVE-2026-119477
7.1 High
-
opajaap wp photo album plus
WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF
CVE-2026-110983
4.3 Medium
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter
CVE-2026-110981
7.1 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action
CVE-2026-92115
8.8 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.3.03.002 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Session History
CVE-2026-96278
7.2 High
-
jacob n. breetvelt wp photo album plus
WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102386
6.5 Medium
-
jacob n. breetvelt wp photo album plus
WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93774
7.1 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection
CVE-2026-87909
7.5 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-18579
7.2 High
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization
CVE-2026-18962
4.3 Medium
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
CVE-2026-18049
7.5 High
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal
CVE-2026-18048
7.5 High
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstart
CVE-2026-17013
6.1 Medium
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips
CVE-2026-17014
5.3 Medium
-
opajaap wp photo album plus
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
CVE-2026-14922
6.1 Medium
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter
CVE-2026-15344
4.9 Medium
-
jacob n. breetvelt wp photo album plus
WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57675
7.1 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute
CVE-2026-10095
6.4 Medium
-
jacob n. breetvelt wp photo album plus
WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability
CVE-2026-54829
7.5 High
-
jacob n. breetvelt wp photo album plus
WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability
CVE-2026-39511
9.3 Critical
-
opajaap wp photo album plus
WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter
CVE-2026-6379
Public exploit
8.6 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scripting
CVE-2025-14835
7.1 High
-
opajaap wp photo album plus
WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
CVE-2025-8726
5.4 Medium
-
opajaap wp photo album plus
WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
CVE-2024-10958
Public exploit
7.3 High
-
opajaap wp photo album plus
Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting
CVE-2024-9951
6.1 Medium
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37416
7.1 High
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus plugin <= 8.8.02.002 - Authenticated Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-38713
6.5 Medium
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability
CVE-2023-49774
5.3 Medium
-
opajaap wp photo album plus
WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution
CVE-2024-4037
6.5 Medium
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability
CVE-2024-31377
10.0 Critical
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability
CVE-2024-31286
9.9 Critical
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-49812
5.3 Medium
-
j.n. breetvelt a.k.a. opajaap wp photo album plus
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49813
7.1 High
-
opajaap wp photo album plus
WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
CVE-2021-25115
6.4 Medium