CVE 7.5 HIGH

WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability_CVE-2026-54829

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection.

This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

Basic Information

ID CVE-2026-54829
Source Patchstack
Published Jun 25, 2026 at 13:25
Modified Jun 25, 2026 at 13:57

Affected Product

Vendor Jacob N. Breetvelt
Product WP Photo Album Plus
Version n/a
Affected Versions Jacob N. Breetvelt WP Photo Album Plus n/a

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.