WP Photo Album Plus

Güvenlik açıkları

• CVE-2024-31377kimlik doğrulamasız≤ 8.7.01.001

  WordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability

  Kritik 10.0

• CVE-2024-31286giriş gerekir→ 8.6.03.005

  WordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerability

  Kritik 9.9

• CVE-2026-39511kimlik doğrulamasız≤ 9.1.08.001

  WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-54829kimlik doğrulamasız≤ 9.1.13.005

  WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability

  Yüksek 7.5

• CVE-2023-49812kimlik doğrulamasız≤ 8.5.02.005

  WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)

  Yüksek 7.5

• CVE-2026-87909abone+≤ 9.2.09.002

  WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection

  Yüksek 7.5

• CVE-2024-10958kimlik doğrulamasız≤ 8.8.08.007

  WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay

  Yüksek 7.3

• CVE-2024-4037kimlik doğrulamasız≤ 8.7.00.003

  WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution

  Yüksek 7.3

• CVE-2026-18579kimlik doğrulamasız≤ 9.2.08.003

  WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting

  Yüksek 7.2

• CVE-2026-93774kimlik doğrulamasız · tıklama gerekir≤ 9.3.02.002

  WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-57675kimlik doğrulamasız · tıklama gerekir≤ 9.2.02.004

  WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-14835kimlik doğrulamasız · tıklama gerekir≤ 9.1.05.008

  WP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scripting

  Yüksek 7.1

• CVE-2026-102386abone+≤ 9.3.02.003

  WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-38713giriş gerekir≤ 8.8.02.002

  WordPress WP Photo Album Plus plugin <= 8.8.02.002 - Authenticated Stored Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2021-25115kimlik doğrulamasız→ 8.0.10

  WP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)

  Orta 6.4

• CVE-2026-10095katılımcı+≤ 9.1.13.005

  WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute

  Orta 6.4

• CVE-2024-9951kimlik doğrulamasız · tıklama gerekir≤ 8.8.05.003

  Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-37416kimlik doğrulamasız · tıklama gerekir≤ 8.8.00.002

  WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2023-49813kimlik doğrulamasız · tıklama gerekir≤ 8.5.02.005

  WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2025-8726abone+≤ 9.0.11.006

  WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

  Orta 5.4

• CVE-2023-49774kimlik doğrulamasız≤ 8.5.02.005

  WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability

  Orta 5.3

• CVE-2026-15344yönetici≤ 9.2.04.002

  WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter

  Orta 4.9

• CVE-2015-3647

  Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin before 6.1.3 for Wor

  Orta 4.3

• CVE-2013-3254

  Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin before 5.0.3 for WordPress allows remote at

  Orta 4.3