CVE-2026-57675highCWE-79

CVE-2026-57675: falha de alta gravidade em Jacob N. Breetvelt WP Photo Album Plus

WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar WP Photo Album Plus

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.3%
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Jacob N. Breetvelt · WP Photo Album Plus
CVEs relacionadas — Jacob N. Breetvelt WP Photo Album Plus

No mesmo produto, das mais perigosas para as menos.

CVE-2026-54829HIGHWordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-39511CRITICALWordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-93774HIGHWordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-102386MEDIUMWordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-119477HIGHWordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%