PT-2026-52414 · Jacob N. Breetvelt · Wp Photo Album Plus

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-54829

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection.

This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-54829

Produtos afetados

Wp Photo Album Plus

Referências · 2

• https://patchstack.com/database/wordpress/plugin/wp-photo-album-plus/vulnerability/wordpress-wp-photo-album-plus-plugin-9-1-13-005-sql-injection-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-54829 · Nota de Segurança