opajaap WP Photo Album Plus

2 known vulnerabilities in opajaap WP Photo Album Plus, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-87909 CVSS 7.5 high The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_magick function…
CVE-2026-18579 CVSS 7.2 high The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_X_FORWARDED_FOR' parameter in all…