Vulnerabilities in opajaap
11 resultsCVE-2024-10958HIGHWP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelayEPSS 1.6%CVE-2026-92115HIGHWP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX ActionEPSS 1.4%CVE-2026-87909HIGHWP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument InjectionEPSS 0.9%CVE-2026-15344MEDIUMWP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' ParameterEPSS 0.6%CVE-2026-18579HIGHWP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-4037MEDIUMWP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2026-10095MEDIUMWP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode AttributeEPSS 0.4%CVE-2024-9951MEDIUMWordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2025-14835HIGHWP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2026-96278HIGHWP Photo Album Plus <= 9.3.03.002 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Session HistoryEPSS 0.3%CVE-2025-8726MEDIUMWP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_uploadEPSS 0.2%