[■] Plugin de WordPress

WP Photo Album Plus

39 expedientes en el radar

Comprueba tu versión de WP Photo Album Plus Sólo las que se están explotando

[■] Registro

Vulnerabilidades (39)

7,2 Alta

CVE-2026-119477: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-119477

T−12d 2 nov. 2026
4,3 Media

CVE-2026-110983: falsificación de peticiones (CSRF) en WP Photo Album Plus

CVE-2026-110983

T−18d 27 oct. 2026
6,1 Media

CVE-2026-110981: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-110981

T−29d 16 oct. 2026
8,8 Alta

CVE-2026-92115: inyección de comandos en WP Photo Album Plus

CVE-2026-92115

T−30d 15 oct. 2026
7,2 Alta

CVE-2026-96278: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-96278

T−35d 9 oct. 2026
6,4 Media

CVE-2026-102386: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-102386

T−45d 30 sept. 2026
7,2 Alta

CVE-2026-93774: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-93774

T−52d 23 sept. 2026
7,5 Alta

CVE-2026-87909: inyección en WP Photo Album Plus

CVE-2026-87909

T−57d 18 sept. 2026
7,2 Alta

CVE-2026-18579: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-18579

T−65d 10 sept. 2026
5,3 Media

CVE-2026-18049: falta de autorización en WP Photo Album Plus

CVE-2026-18049

T−92d 14 ago. 2026
6,4 Media

CVE-2026-14922: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-14922

T−93d 13 ago. 2026
9,1 Crít.

CVE-2026-18048: recorrido de rutas (path traversal) en WP Photo Album Plus

CVE-2026-18048

T−96d 10 ago. 2026
4,3 Media

CVE-2026-18962: acceso a datos de otros usuarios (IDOR) en WP Photo Album Plus

CVE-2026-18962

T−96d 10 ago. 2026
6,1 Media

CVE-2026-17013: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-17013

T−96d 10 ago. 2026
5,3 Media

CVE-2026-17014: recorrido de rutas (path traversal) en WP Photo Album Plus

CVE-2026-17014

T−103d 3 ago. 2026
4,9 Media

CVE-2026-15344: inyección SQL en WP Photo Album Plus

CVE-2026-15344

T−109d 28 jul. 2026
6,4 Media

CVE-2026-10095: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-10095

T−136d 30 jun. 2026
7,2 Alta

CVE-2026-57675: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2026-57675

T−137d 30 jun. 2026
7,5 Alta

CVE-2026-54829: inyección SQL en WP Photo Album Plus

CVE-2026-54829

T−150d 17 jun. 2026
7,5 Alta

CVE-2026-6379: inyección SQL en WP Photo Album Plus

CVE-2026-6379

T−156d 11 jun. 2026
7,5 Alta

CVE-2026-39511: inyección SQL en WP Photo Album Plus

CVE-2026-39511

T−215d 13 abr. 2026
7,1 Alta

CVE-2025-14835: vulnerabilidad en WP Photo Album Plus

CVE-2025-14835

T−312d 6 ene. 2026
5,4 Media

CVE-2025-8726: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2025-8726

T−407d 3 oct. 2025
7,3 Alta

CVE-2024-10958: inyección de código en WP Photo Album Plus

CVE-2024-10958

T−734d 10 nov. 2024
6,1 Media

CVE-2024-9951: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2024-9951

T−759d 16 oct. 2024
6,4 Media

CVE-2024-38713: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2024-38713

T−856d 11 jul. 2024
6,1 Media

CVE-2024-37416: cross-site scripting (XSS) en WP Photo Album Plus

CVE-2024-37416

T−869d 28 jun. 2024
6,5 Media

CVE-2024-4037: inyección de código en WP Photo Album Plus

CVE-2024-4037

T−904d 23 may. 2024
10,0 Crít.

CVE-2024-31377: subida de ficheros peligrosos en WP Photo Album Plus

CVE-2024-31377

T−921d 7 may. 2024
9,9 Crít.

CVE-2024-31286: subida de ficheros peligrosos en WP Photo Album Plus

CVE-2024-31286

T−953d 5 abr. 2024