Log out
Get PRO

WP Photo Album Plus

  • WP Photo Album Plus on WordPress.org
  • Current version: 9.0.01.003
  • Last update: February 5, 2025
  • Known issues: Open
The WordPress Photo Album Plus (WPPA+) plugin is a customizable multimedia content management and display system that allows users to create and manage any number of albums containing any type of multimedia file. It offers full control over display sizes, links, metadata, and custom-defined fields, as well as front-end uploads, bulk imports, and built-in search functions. The plugin also includes a rating system, commenting system, and moderation features, and supports Cloudinary cloud storage and Fotomoto print services. The plugin admin section allows users to create, manage, and customize albums, as well as control various settings.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Submit

Vulnerabilities

  • Input validation vulnerability in WP Photo Album Plus 9.0.11.006

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that allows hackers to inject harmful web scripts into photo album descriptions. This can happen in all versions up to 9.0.11.006, an...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.8.08.007

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that allows unauthorized users to run shortcodes. This can be done through the getshortcodedrenderedfenodelay AJAX action in versions...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.8.05.003

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that allows hackers to inject harmful scripts into pages. This can happen if a user is tricked into clicking on a link. This vulnerab...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.8.02.002

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security vulnerability that allows attackers to inject harmful web scripts into pages. This can be done by any authenticated user with subscriber-le...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.8.00.002

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that allows attackers to inject harmful web scripts if a user clicks on a link. This can happen in versions up to 8.8.00.002 and is c...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.7.00.003

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security vulnerability in all versions up to 8.7.02.003. This means that anyone, even without an account, can activate a feature that doesn't check ...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.7.01.001

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that allows anyone (even without an account) to upload any type of file to the website. This could potentially allow hackers to acces...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.6.03.004

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that allows users to upload any type of file without proper validation. This could potentially allow attackers, who have at least sub...

    Read More

  • Access violation vulnerability in WP Photo Album Plus 8.5.02.005

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security issue that affects all versions up to 8.5.02.005. This issue is called an Insecure Direct Object Reference. It happens because of a missing...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.5.02.005

    Fixed

    The WP Photo Album Plus plugin for WordPress is vulnerable to a security issue called Cross-Site Scripting. This vulnerability affects versions up to 8.5.02.005 of the plugin. Attackers can use this ...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.5.02.005

    Fixed

    The WP Photo Album Plus plugin for WordPress has a security vulnerability that could allow attackers to disguise their IP address. This is because the plugin does not have enough restrictions on wher...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 5.4.7

    Fixed

    The WP Photo Album Plus plugin for WordPress contains a security flaw which allows attackers to inject malicious code into webpages. This code will be executed whenever a user visits the affected pag...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 1.0

    Fixed

    The WP Photo Album (WPPA) plugin for WordPress versions before 1.1 had two security flaws that allowed remote attackers to gain access to the system and execute malicious SQL commands. This issue was ...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 8.0.10

    Fixed

    The WP Photo Album Plus WordPress plugin had a security issue before version 8.0.10. Anyone

    Read More

  • Input validation vulnerability in WP Photo Album Plus 6.1.3

    Fixed

    The WP Photo Album Plus plugin (also known as WPPA) before version 6.1.3 had vulnerabilities that allowed malicious people to insert harmful code into WordPress websites. This code could be used to ge...

    Read More

  • Input validation vulnerability in WP Photo Album Plus 5.4.17

    Fixed

    The WP Photo Album Plus plugin for WordPress is not secure in versions up to 5.4.17. An attacker could make a link or page that

    Read More

  • Input validation vulnerability in WP Photo Album Plus 5.0.3

    Fixed

    The WP Photo Album Plus plugin for WordPress contained a security vulnerability that allowed remote attackers to send malicious code to a website. This malicious code could be used to gain access to i...

    Read More