agentprime: opajaap-wp-photo-album-plusEvery new CVE for opajaap-wp-photo-album-plus.https://agentprime.io/CVE-2026-92115: WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Actionhttps://agentprime.io/advisories/CVE-2026-92115/https://agentprime.io/advisories/CVE-2026-92115/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:41:08 GMTCVECVE-2026-96278: WP Photo Album Plus <= 9.3.03.002 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Session Historyhttps://agentprime.io/advisories/CVE-2026-96278/https://agentprime.io/advisories/CVE-2026-96278/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 07:41:42 GMTCVECVE-2026-87909: WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injectionhttps://agentprime.io/advisories/CVE-2026-87909/https://agentprime.io/advisories/CVE-2026-87909/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 02:27:09 GMTCVECVE-2026-18579: WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2026-18579/https://agentprime.io/advisories/CVE-2026-18579/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 03:39:33 GMTCVECVE-2026-15344: WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameterhttps://agentprime.io/advisories/CVE-2026-15344/https://agentprime.io/advisories/CVE-2026-15344/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 02:31:39 GMTCVECVE-2026-10095: WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-10095/https://agentprime.io/advisories/CVE-2026-10095/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 09:32:27 GMTCVECVE-2025-14835: WP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-14835/https://agentprime.io/advisories/CVE-2025-14835/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jan 2026 05:25:55 GMTCVECVE-2025-8726: WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_uploadhttps://agentprime.io/advisories/CVE-2025-8726/https://agentprime.io/advisories/CVE-2025-8726/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Oct 2025 02:24:35 GMTCVECVE-2024-10958: WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelayhttps://agentprime.io/advisories/CVE-2024-10958/https://agentprime.io/advisories/CVE-2024-10958/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Nov 2024 12:30:34 GMTCVECVE-2024-9951: Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-9951/https://agentprime.io/advisories/CVE-2024-9951/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Oct 2024 07:34:44 GMTCVECVE-2024-4037: WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2024-4037/https://agentprime.io/advisories/CVE-2024-4037/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 May 2024 08:30:25 GMTCVE