Wp Photo Album Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_photo_album_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Photo Album Plus (d15e8dd6-32d8-5309-904f-9b312b501abb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18048 |
vulnerable | 2026-09-16 04:34:02.258843 |
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, and performs no authorisation check on it, allowing unauthenticated attackers to delete arbitrary ZIP archives on the server, including ones stored outside the web root.
Published: 2026-08-12T06:00:16.626Z
Updated: 2026-08-12T19:41:59.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-18049 |
vulnerable | 2026-09-16 04:34:01.990086 |
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public endpoint actions and builds an option name from a client-supplied value without restricting it to its own options, allowing unauthenticated users to read the value of other autoloaded options whose names end in a matching suffix.
Published: 2026-08-12T06:00:16.799Z
Updated: 2026-08-12T16:06:28.661Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-18962 |
vulnerable | 2026-09-16 04:34:01.600372 |
WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization
The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-end upload, allowing any authenticated user, such as a Subscriber, to upload files into albums owned by other users or by the administrator. Exploitation requires the WP Photo Album Plus WordPress plugin before 9.2.09.002's front-end user upload feature to be enabled, which is not the default.
Published: 2026-08-12T06:00:18.323Z
Updated: 2026-08-12T12:28:17.858Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14922 |
vulnerable | 2026-09-16 04:33:12.030446 |
WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment
WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001 through a decode-after-sanitize (double-encoding) flaw in the photo-comment pipeline. On write, `wppa_do_comment()` sanitizes the comment with `wppa_filter_html()` (wp_kses) followed by `wp_strip_all_tags()` (`wppa-functions.php:2623-2624`). Because `wp_strip_all_tags()` only removes *real* tags, an attacker who submits a **double HTML-entity-encoded** payload (e.g. `&lt;img src=... onload=...&gt;`) passes the write filters as harmless entity text and is stored one decode-level down (`<img ... onload=...>`).
Published: 2026-07-31T06:00:08.117Z
Updated: 2026-07-31T19:41:45.293Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17014 |
vulnerable | 2026-09-16 04:33:03.797306 |
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores.
Published: 2026-08-09T06:00:12.516Z
Updated: 2026-08-11T19:48:17.291Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17013 |
vulnerable | 2026-09-16 04:33:03.388645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6379 |
vulnerable | 2026-06-08 08:07:04.717814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25115 |
vulnerable | 2026-06-08 05:30:39.990971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.