Pricing
Case studies
Login
Start trial
WP Photo Album Plus
Jacob N. Breetvelt
Developer
9.1.11.001
Latest version
10,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
24 patched
12 Mitigation rules
SQL Injection vulnerability
<= 9.1.08.001
6 days ago
Reflected Cross-Site Scripting vulnerability
<= 9.1.05.008
07/01/2026
Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload vulnerability
<= 9.0.11.006
03/10/2025
Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay vulnerability
<= 8.8.08.007
11/11/2024
Reflected Cross-Site Scripting vulnerability
<= 8.8.05.003
16/10/2024
Authenticated Stored Cross Site Scripting (XSS) vulnerability
<= 8.8.02.002
11/07/2024
Reflected Cross Site Scripting (XSS) vulnerability
<= 8.8.00.002
28/06/2024
Unauthenticated Arbitrary Shortcode Execution vulnerability
<= 8.7.00.003
24/05/2024
Unauthenticated Arbitrary File Upload vulnerability
<= 8.7.01.001
07/05/2024
Arbitrary File Upload vulnerability
< 8.6.03.005
05/04/2024
Cross Site Scripting (XSS) vulnerability
<= 8.5.02.005
05/12/2023
Insecure Direct Object References (IDOR) vulnerability
<= 8.5.02.005
05/12/2023
IP Bypass vulnerability
<= 8.5.02.005
05/12/2023
Stored Cross-Site Scripting (XSS) vulnerability
<= 8.0.9
02/01/2022
Cross Site Scripting
5.4.4
19/06/2016
Full Path Disclosure
<= 4.9.0
18/10/2015
XSS
<= 4.9.2
15/05/2015
XSS
<= 5.0.10
15/05/2015
Stored XSS
<= 5.4.8
15/05/2015
Reflected XSS
<= 5.4.17
15/05/2015
XSS
<= 4.8.11
15/05/2015
Multiple XSS
<= 6.1.2
06/05/2015
XSS
<= 5.0.2
22/04/2013
SQL Injection
<= 4.1.1
15/10/2011