Medium · 4.9 CVE-2024-32775 EUVD-2024-30561GHSA-2pjm-hwx3-g287

WordPress Embed Google Photos album plugin <= 2.1.9 - Server Side Request Forgery (SSRF) vulnerability

Published Apr 24, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Pavex Product: Embed Google Photos album

Description

Server-Side Request Forgery (SSRF) vulnerability in Pavex Embed Google Photos album.This issue affects Embed Google Photos album: from n/a through 2.1.9.

Affected products

Vendor	Product	Affected	Fixed
Pavex	Embed Google Photos album	≤ 2.1.9	—

References

https://patchstack.com/database/vulnerability/embed-google-photos-album-easily/wordpress-embed-google-photos-album-plugin-2-1-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry