WP Photo Album Plus
Jacob N. Breetvelt
Developer
9.3.05.002
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
0 present
43 patched
25 Mitigation rules
- Photo Comment Deletion vulnerability< 9.3.04.0042 days ago
- Reflected XSS vulnerability< 9.2.11.00220/10/2026
- Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action vulnerability<= 9.3.02.00216/10/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 9.3.03.00209/10/2026
- Cross Site Scripting (XSS) vulnerability<= 9.3.02.00330/09/2026
- Cross Site Scripting (XSS) vulnerability<= 9.3.02.00223/09/2026
- Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability<= 9.2.09.00218/09/2026
- Cross Site Scripting (XSS) vulnerability<= 9.2.08.00311/09/2026
- Unauthenticated Export ZIP File Deletion via delexportzips vulnerability< 9.2.07.00227/08/2026
- Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal vulnerability< 9.2.07.00218/08/2026
- Reflected XSS via lbstart vulnerability< 9.2.07.00218/08/2026
- Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability< 9.2.09.00214/08/2026
- Unauthenticated Option Disclosure via gettogo vulnerability< 9.2.07.00214/08/2026
- Subscriber+ Stored XSS vulnerability< 9.2.04.00313/08/2026
- Authenticated (Administrator+) SQL Injection vulnerability<= 9.2.04.00228/07/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 9.1.13.00530/06/2026
- Cross Site Scripting (XSS) vulnerability<= 9.2.02.00430/06/2026
- SQL Injection vulnerability<= 9.1.13.00517/06/2026
- Unauthenticated SQL Injection via 'wppa-supersearch' Parameter vulnerability< 9.1.11.00111/06/2026
- SQL Injection vulnerability<= 9.1.08.00113/04/2026
- Reflected Cross-Site Scripting vulnerability<= 9.1.05.00807/01/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload vulnerability<= 9.0.11.00603/10/2025
- Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay vulnerability<= 8.8.08.00711/11/2024
- Reflected Cross-Site Scripting vulnerability<= 8.8.05.00316/10/2024
- Authenticated Stored Cross Site Scripting (XSS) vulnerability<= 8.8.02.00211/07/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 8.8.00.00228/06/2024
- Unauthenticated Arbitrary Shortcode Execution vulnerability<= 8.7.00.00324/05/2024
- Unauthenticated Arbitrary File Upload vulnerability<= 8.7.01.00107/05/2024
- Arbitrary File Upload vulnerability< 8.6.03.00505/04/2024
- Cross Site Scripting (XSS) vulnerability<= 8.5.02.00505/12/2023
- Insecure Direct Object References (IDOR) vulnerability<= 8.5.02.00505/12/2023
- IP Bypass vulnerability<= 8.5.02.00505/12/2023
- Stored Cross-Site Scripting (XSS) vulnerability<= 8.0.902/01/2022
- Cross Site Scripting5.4.419/06/2016
- Full Path Disclosure<= 4.9.018/10/2015
- XSS<= 4.9.215/05/2015
- XSS<= 5.0.1015/05/2015
- Stored XSS<= 5.4.815/05/2015
- Reflected XSS<= 5.4.1715/05/2015
- XSS<= 4.8.1115/05/2015
- Multiple XSS<= 6.1.206/05/2015
- XSS<= 5.0.222/04/2013
- SQL Injection<= 4.1.115/10/2011