Skip to content
OpenAdvisories
High · 7.1 CVE-2026-119477 EUVD-2026-116771GHSA-q45c-9cwx-46jr

WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by Patchstack

Vendor: Jacob N. Breetvelt Product: WP Photo Album Plus

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003.

Affected products

VendorProductAffectedFixed
Jacob N. Breetvelt WP Photo Album Plus ≤ 9.3.05.003 —

References