Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-49774 EUVD-2023-53697GHSA-q8m3-2vgv-qgh9

WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability

Published Jun 4, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.

Affected products

VendorProductAffectedFixed
J.N. Breetvelt a.k.a. OpaJaap WP Photo Album Plus ≤ 8.5.02.005 —

References