WP Photo Album Plus, CVE-2026-17013

CVE, Research URL: CVE-2026-17013
Home page URL: Security reports for WP Photo Album Plus
Application: WP Photo Album Plus
Published on: Aug 12, 2026
Research Description: The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone who is tricked into opening a crafted link to a page displaying one of its galleries.
Affected versions: max 9.2.07.002.
Status: vulnerable