Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-6379 2 Wordpress, Wp Photo Album Plus Project 2 Wordpress, Wp Photo Album Plus 2026-05-18 8.6 High
The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.