EUVD-2007-0614

Malware in sbrugna...

EUVD-2004-2259

Malware in sbrugna...

EUVD-2008-4606

Malware in sbrugna...

EUVD-2008-4316

Malware in sbrugna...

EUVD-2008-0946

Malware in sbrugna...

EUVD-2006-2203

Malware in sbrugna...

EUVD-2005-2414

Malware in sbrugna...

EUVD-2007-2184

Malware in sbrugna...

EUVD-2008-2202

Malware in sbrugna...

EUVD-2008-6123

Malware in sbrugna...

EUVD-2013-3191

Malware in sbrugna...

EUVD-2005-1118

Malware in sbrugna...

EUVD-2007-2420

Malware in sbrugna...

EUVD-2006-2679

Malware in sbrugna...

EUVD-2007-3542

Malware in sbrugna...

EUVD-2007-6126

Malware in sbrugna...

CVE-2025-8726

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

EUVD-2025-32423

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2025-8726

CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...