Unrated severityNVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

WordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability

CVE-2026-54829

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection.

This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/wp-photo-album-plus/vulnerability/wordpress-wp-photo-album-plus-plugin-9-1-13-005-sql-injection-vulnerabilitymitrevdb-entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000