WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.5epss 0.3%
exploitation probability
0.3%top 79% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public endpoint actions and builds an option name from a client-supplied value without restricting it to its own options, allowing unauthenticated users to read the value of other autoloaded options whose names end in a matching suffix.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Unknown · WP Photo Album Pluspublic PoCs found — 1
cve_referencewpscan.com/vulnerability/ee7a93ff-95f2-48f6-9e35-2e518a28e2ab/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.