Skip to content
OpenAdvisories
High · 7.5 CVE-2026-54829 EUVD-2026-39392GHSA-cr8m-2vj9-r7h2

WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability

Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection.

This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

Affected products

VendorProductAffectedFixed
Jacob N. Breetvelt WP Photo Album Plus ≤ 9.1.13.005 —

References