<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wp-photo-album-plus</title><description>Every new CVE for wp-photo-album-plus.</description><link>https://agentprime.io/</link><item><title>CVE-2026-110983: WP Photo Album Plus &lt; 9.3.04.004 - Photo Comment Deletion via CSRF</title><link>https://agentprime.io/advisories/CVE-2026-110983/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110983/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 06:00:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110981: WP Photo Album Plus &lt; 9.2.11.002 - Reflected XSS via &apos;wppa-cat&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-110981/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110981/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Oct 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18962: WP Photo Album Plus &lt; 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2026-18962/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18962/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 06:00:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18049: WP Photo Album Plus &lt; 9.2.07.002 - Unauthenticated Option Disclosure via gettogo</title><link>https://agentprime.io/advisories/CVE-2026-18049/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18049/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18048: WP Photo Album Plus &lt; 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal</title><link>https://agentprime.io/advisories/CVE-2026-18048/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18048/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17013: WP Photo Album Plus &lt; 9.2.07.002 - Reflected XSS via lbstart</title><link>https://agentprime.io/advisories/CVE-2026-17013/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17013/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17014: WP Photo Album Plus &lt; 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips</title><link>https://agentprime.io/advisories/CVE-2026-17014/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17014/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 09 Aug 2026 06:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14922: WP Photo Album Plus &lt; 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment</title><link>https://agentprime.io/advisories/CVE-2026-14922/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14922/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Jul 2026 06:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6379: WP Photo Album Plus &lt; 9.1.11.001 - Unauthenticated SQL Injection via &apos;wppa-supersearch&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-6379/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6379/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 18 May 2026 06:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-25115: WP Photo Album Plus &lt; 8.0.10 - Stored Cross-Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2021-25115/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-25115/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Feb 2022 09:20:55 GMT</pubDate><category>CVE</category></item></channel></rss>