W
WP Photo Album Plus
Security Risk Profile
35
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 24, 2024 to present
4
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
35/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
Code Injection
1
Most Affected Products
1. WP Photo Album Plus WP Photo Album Plus2
2. WP Photo Album Plus WordPress plugin1
3. WP Photo Album Plus Photo Album Plus1
4. Wppa Wp Photo Album Plus Wordpress1
Recent Vulnerabilities
See more →CVE-2026-96278
CVSS 7.2high
WP Photo Album Plus <= 9.3.03.002 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Session History
Oct 10, 2026🔧 No Patch
CVE-2026-18962
CVSS 4.3medium
WP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization
Aug 12, 2026🔧 No Patch
CVE-2024-9951
CVSS 6.1EPSS 0%medium
Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting
Oct 17, 2024🔧 No Patch
CVE-2024-4037
CVSS 7.3EPSS 0%high
WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution
May 24, 2024🔧 No Patch
Monitor WP Photo Album Plus in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.