ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection

ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...

Joomla! Roland Breedveld Album 1.14 - Local File Inclusion

Joomla! Roland Breedveld Album 1.14 comalbum is susceptible to local file inclusion because it allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php. id: CVE-2009-3318 info: name: Joomla! Roland Breedveld...

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus Arbitrary Shortcode Execution CVE-2024-10958 PoC code for unauthenticated arbitrary shortcode execution vulnerability in WordPress WP Photo Album Plus plugin. Details Affected Versions: = 8.8.08.007 CVSS Score: 7.3 High Vulnerability Type: Arbitrary Shortcode Executi...

CVE-2026-122326

A flaw was found in Chevereto. An improper authorization check in the album listing endpoint allows an unauthenticated remote attacker to access private albums. By supplying an album identifier alongside a public session token, an attacker can retrieve image filenames, view direct file links, and...

CVE-2026-112299

A flaw was found in smr. A remote authenticated attacker can trigger Server-Side Request Forgery SSRF by supplying a manipulated website URL during album editing. Due to improper validation in the URL reachability check, the application can be induced to send unintended requests to arbitrary...

CVE-2026-77439

Immich is a self-hosted photo and video management solution. Prior to 3.0.3, an authenticated user with editor access to a shared album can change the existing owner's role because album member role updates do not protect the owner from modification. By demoting the owner and then promoting...

CVE-2026-77439

Immich is vulnerable to broken access control in its album member management system prior to version 3.0.3 . An authenticated user with Editor access to a shared album can perform a complete album takeover by exploiting two related flaws: Privilege Escalation via the PATCH /api/albums/:albumId/us...

CVE-2026-77439 Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints

Immich is a self-hosted photo and video management solution. Prior to 3.0.3, an authenticated user with editor access to a shared album can change the existing owner's role because album member role updates do not protect the owner from modification. By demoting the owner and then promoting...

CVE-2026-122326

Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an album's encoded i...

CVE-2026-122326 Chevereto before 4.5.8 Private Album Image Disclosure via get-album-contents

Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an album's encoded i...

CVE-2026-122326 Chevereto before 4.5.8 Private Album Image Disclosure via get-album-contents

Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an album's encoded i...

EUVD-2026-117534

Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an album's encoded i...

CVE-2026-122326

Chevereto versions before 4.5.8 are vulnerable to an authorization bypass in the get-album-contents action of the /json route. This flaw allows unauthenticated attackers to access private albums by providing another user's album ID. Specifically, an attacker possessing a session token from any pu...

CVE-2026-119477

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003...

CVE-2026-119477

The WP Photo Album Plus plugin (by Jacob N. Breetvelt) is vulnerable to Stored Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 9.3.05.003 . While the CVSS 3.1 score is 7.1 (HIGH) , the documents do...

EUVD-2026-116771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003...

CVE-2026-119477 WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob N. Breetvelt WP Photo Album Plus wp-photo-album-plus allows Stored XSS.This issue affects WP Photo Album Plus: from n/a through 9.3.05.003...

WordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin WP Photo Album Plus versions = 9.3.05.003...

cve-2026-6379

CVE-2026-6379 — WP Photo Album Plus :8080/?pageid=" --mode probe python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode probe-calendar python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode version python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode hash A vulnerable target replies in...

CVE-2026-110983

The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its comment-management requests, allowing attackers to delete photo comments by tricking a logged-in user who holds comment-moderation rights into loading a crafted page...