wp-photo-album-plus vulnerabilities
CVEs whose affected-version data names the wp-photo-album-plus package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102386Medium· 6.5Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions.
Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions.
▾ SunlitJacob N. Breetvelt · wp-photo-album-plusEPSS 0.21%via NVD
CVE-2026-93774High· 7.1Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
▾ TwilightJacob N. Breetvelt · wp-photo-album-plusEPSS 0.25%via NVD