https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T02:33:27.875085+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-6379 CVE-2026-6379 — WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection via 'wppa-supersearch' Parameter 2026-10-13T02:33:27.891161+00:00

Affected: Unknown WP Photo Album Plus

The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.