[ Vendor · 2 CVEs ]

opajaap

CVEs affecting opajaap published in the last 30 days, plus any opajaap CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-92115 16 Oct 2026 CVSS 8.8 opajaap WP Photo Album PlusThe WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via…
CVE-2026-96278 10 Oct 2026 CVSS 7.2 opajaap WP Photo Album PlusThe WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and…