CVE-2026-102386

Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions.

Published Sep 30, 2026
CVSS 6.5 medium
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

Jacob N. Breetvelt WP Photo Album Plus

CVE-2026-102386 at the National Vulnerability Database