VYPR
← All advisories
High severity8.6NVD Advisory· Published May 18, 2026· Updated May 18, 2026

CVE-2026-6379

CVE-2026-6379

Description

The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

2