Filtered by vendor Opajaap Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-31377 1 Opajaap 1 Wp Photo Album Plus 2024-11-21 10 Critical
Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.7.01.001.
CVE-2024-10958 2 Opajaap, Wppa 2 Wp Photo Album Plus, Wp Photo Album Plus 2024-11-14 7.3 High
The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVE-2024-9951 1 Opajaap 1 Wp Photo Album Plus 2024-10-18 6.1 Medium
The WP Photo Album Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wppa-tab' parameter in all versions up to, and including, 8.8.05.003 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.