Skip to contentUnknown Wp Photo Album Plus vulnerabilities
- opajaap wp photo album plusWP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRFCVE-2026-1109834.3 Medium
- opajaap wp photo album plusWP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' ParameterCVE-2026-1109817.1 High
- opajaap wp photo album plusWP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing AuthorizationCVE-2026-189624.3 Medium
- opajaap wp photo album plusWP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogoCVE-2026-180497.5 High
- opajaap wp photo album plusWP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path TraversalCVE-2026-180487.5 High
- opajaap wp photo album plusWP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstartCVE-2026-170136.1 Medium
- opajaap wp photo album plusWP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzipsCVE-2026-170145.3 Medium
- opajaap wp photo album plusWP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo CommentCVE-2026-149226.1 Medium
- opajaap wp photo album plusWP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' ParameterCVE-2026-6379Public exploit8.6 High
- opajaap wp photo album plusWP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)CVE-2021-251156.4 Medium