https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T01:43:52.376939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351577 EUVD-2026-351577 2026-10-10T01:43:52.379224+00:00 EUVD-2026-351577 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17013 fkie_cve-2026-17013 2026-10-10T01:43:52.379256+00:00

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone who is tricked into opening a crafted link to a page displaying one of its galleries.

 https://cve.radiocsirt.org/vuln/ghsa-7x94-87h5-h3g2 GHSA-7x94-87h5-h3g2 2026-10-10T01:43:52.379287+00:00

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone who is tricked into opening a crafted link to a page displaying one of its galleries.