WP Photo Album Plus vulnerabilities

3 known vulnerabilities in WP Photo Album Plus from Jacob N. Breetvelt. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WP Photo Album Plus: Improper Neutralization of Input During Web Page Generation

  CVE-2026-124260Nov 13, 2026Jacob N. Breetvelt

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.06.001.

• 7.1 High severity

  WP Photo Album Plus: Improper Neutralization of Input During Web Page Generation

  CVE-2026-119477Nov 4, 2026Jacob N. Breetvelt

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003.

• 7.5 High severity

  WP Photo Album Plus: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-54829Jun 25, 2026Jacob N. Breetvelt

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.