Approved changes feed: RSS · Atom

cpe:2.3:a:jacob_n._breetvelt:wp_photo_album_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJacob N. Breetvelt (ec7cb7d9-3cd1-58d4-a578-e10fc42abb50)
ProductWp Photo Album Plus (e699cc5e-ce4f-50a2-9f31-c17bca4330eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57675 vulnerable 2026-07-29 01:03:15.914642 WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.
Published: 2026-07-02T11:15:34.376Z
Updated: 2026-07-02T15:53:05.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54829 vulnerable 2026-07-29 01:00:28.027225 WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability
HIGH (7.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.
Published: 2026-06-25T13:25:31.337Z
Updated: 2026-06-25T13:57:55.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39511 vulnerable 2026-07-29 00:46:19.019507 WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.
Published: 2026-06-15T20:17:57.566Z
Updated: 2026-06-16T12:34:02.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.