CVE-2026-93774

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.

Published Sep 23, 2026
CVSS 7.1 high
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

Jacob N. Breetvelt WP Photo Album Plus

CVE-2026-93774 at the National Vulnerability Database