Known vulnerabilities in the Wp Photo Album Plus plugin
15 security advisories have been published for the Wp Photo Album Plus plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wp Photo Album Plus - Arbitrary File Upload (CVE-2026-18962) MEDIUM
- Wp Photo Album Plus - Cross-Site Request Forgery (CSRF) (CVE-2026-18049) HIGH
- Wp Photo Album Plus - Improper Input Validation (CVE-2026-18048) HIGH
- Wp Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2026-17013) MEDIUM
- Wp Photo Album Plus - Cross-Site Request Forgery (CSRF) (CVE-2026-17014) MEDIUM
- Wp Photo Album Plus - SQL Injection (CVE-2026-15344) MEDIUM
- WP Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2026-57675) HIGH
- WP Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2026-10095) MEDIUM
- WP Photo Album Plus - SQL Injection (CVE-2026-39511) CRITICAL
- Wp Photo Album Plus - SQL Injection (CVE-2026-6379) HIGH
- Wp Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2025-14835) HIGH
- Wp Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2025-8726) MEDIUM
- The Wp Photo Album Plus - Security Vulnerability (CVE-2024-10958) HIGH
- Wp Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2024-9951) MEDIUM
- Wp Photo Album Plus - Security Vulnerability (CVE-2024-4037) MEDIUM
- WP Photo Album Plus - Cross-Site Scripting (XSS) (CVE-2021-25115) MEDIUM