CVE-2026-18049: WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public endpoint actions and builds an option name from a client-supplied value without restricting it to its own options, allowing unauthenticated users to read the value of other autoloaded options whose names end in a matching suffix.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WP Photo Album Plus WordPress pluginto a version that resolves this vulnerability.Fixed in 9.2.07.002
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18049?
CVE-2026-18049 has a risk score of 43, indicating a moderate severity level.
How do I fix CVE-2026-18049?
To resolve CVE-2026-18049, update the WP Photo Album Plus plugin to version 9.2.07.002 or later.
What systems are affected by CVE-2026-18049?
CVE-2026-18049 affects versions of the WP Photo Album Plus plugin prior to 9.2.07.002.
What does CVE-2026-18049 exploit in WP Photo Album Plus?
CVE-2026-18049 exploits a lack of capability and nonce checks on a public endpoint, allowing unauthenticated option disclosure.
Can unauthenticated users exploit CVE-2026-18049?
Yes, CVE-2026-18049 allows unauthenticated users to read option values, posing a risk of information leakage.