VendorsWPPAwp_photo_album_plusany version
Vulnerabilities

WPPA WP Photo Album Plus any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2023-49812
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)
Published 2023-12-19 · Modified
7.5EPSS 0.005
CVE-2024-10958
WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
Published 2024-11-10 · Analyzed
7.3EPSS 0.016
CVE-2024-4037
WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution
Published 2024-05-24 · Modified
7.3EPSS 0.005
CVE-2023-49813
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-14 · Modified
7.1EPSS 0.004
CVE-2024-37416
WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-07-22 · Modified
7.1EPSS 0.003
CVE-2021-25115
WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)
Published 2022-02-14 · Analyzed
6.4EPSS 0.007