Jacob N. Breetvelt vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jacob N. Breetvelt products: 5 record(s), with severity, exploitation and fixes.

WP Photo Album Plus 5

Exploited only (KEV) →

CVE-2026-102386 Medium · 6.5 CWE-79 Sep 30, 2026

WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions.

CVE-2026-93774 High · 7.1 CWE-79 Sep 23, 2026

WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.

CVE-2026-57675 High · 7.1 CWE-79 Jul 2, 2026

WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.

CVE-2026-54829 High · 7.5 CWE-89 Jun 25, 2026

WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

CVE-2026-39511 Critical · 9.3 CWE-89 Jun 15, 2026

WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.