Advisories · Technology

Jacob N. Breetvelt WP Photo Album Plus.

Every CVE that names Jacob N. Breetvelt WP Photo Album Plus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119477 CVE record

CVSS 7.1 High

WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2026-102386 CVE record

CVSS 6.5 Medium

WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-93774 CVE record

CVSS 7.1 High

WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2026
CVE-2026-57675 CVE record

CVSS 7.1 High

WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2026
CVE-2026-54829 CVE record

CVSS 7.5 High

WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- SQL injection
Not analysed yet 25 Jun 2026
CVE-2026-39511 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability
- Jacob N. Breetvelt WP Photo Album Plus
- SQL injection
Not analysed yet 15 Jun 2026