CVE-2026-119477highCWE-79

CVE-2026-119477: falha de alta gravidade em Jacob N. Breetvelt WP Photo Album Plus

WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar WP Photo Album Plus

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.1%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Jacob N. Breetvelt · WP Photo Album Plus
CVEs relacionadas — Jacob N. Breetvelt WP Photo Album Plus

No mesmo produto, das mais perigosas para as menos.

CVE-2026-54829HIGHWordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-39511CRITICALWordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-93774HIGHWordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57675HIGHWordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-102386MEDIUMWordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%