All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-54829
HIGHpublished 2026-06-25 14:16 UTC · 3 days ago · modified 2026-06-25 15:16 UTC
7.5
CVSS / 10
// description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection. This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.
// cvss 3.1 vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L
// weaknesses (CWE)
- CWE-89