High severity7.5NVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

CVE-2026-54829

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection.

This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

Affected products

WordPress/Wp Photo Album Plusllm-fuzzy
Range: <=9.1.13.005
Package: https://wordpress.org/plugins/wp-photo-album-plus

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/wp-photo-album-plus/vulnerability/wordpress-wp-photo-album-plus-plugin-9-1-13-005-sql-injection-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000