Vulnerabilidades em opajaap
9 resultadosAnálise Vexday
A opajaap registra 6 CVEs no histórico, com apenas 1 publicada nos últimos 90 dias e nenhuma sob ataque ativo confirmado, indicando risco contido. A ausência de vulnerabilidades críticas (CVSS) mitiga a severidade, porém a predominância de CWE-79 (Cross-site Scripting) aponta para padrão de fraqueza em validação de entrada que merece atenção em novos desenvolvimentos.
CVE-2024-10958HIGHWP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelayEPSS 1.6%CVE-2026-87909HIGHWP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument InjectionEPSS 0.5%CVE-2024-4037MEDIUMWP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2026-10095MEDIUMWP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode AttributeEPSS 0.4%CVE-2026-15344MEDIUMWP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' ParameterEPSS 0.3%CVE-2024-9951MEDIUMWordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2026-18579HIGHWP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-14835HIGHWP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2025-8726MEDIUMWP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_uploadEPSS 0.2%