WordPress Album Cover Finder plugin <= 0.7.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin Album Cover Finder versions = 0.7.0...

CVE-2026-84047

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-84047 Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

EUVD-2026-76793

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-84047

The Album Cover Finder WordPress plugin (versions

CVE-2026-84047 Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

PT-2026-90577

Name of the Vulnerable Software and Affected Versions Album Cover Finder versions prior to 0.7.1 Description The Album Cover Finder WordPress plugin fails to properly sanitize and escape the and action parameter before incorporating it into a SQL query. This flaw allows unauthenticated users to...

CVE-2026-84047: Improper Neutralization of Special Elements used in an SQL Command

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-72540

This CVE was rejected by Red Hat CNA-LR as not valid. However, EUVD and PT Security describe an insecure direct object reference (IDOR) in PhotoPrism through commit bb0b933. The AlbumCover handler does not verify that the requesting user is authorized to access the specified album before serving ...

EUVD-2026-56010

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...

CVE-2026-72540

...

PT-2026-70115

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...

CVE-2019-14467

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked...

iTunes 7.3.x - Heap overflow in album cover parsing

iSEC Partners Security Advisory - 2007-005-itunes https://www.isecpartners.com -------------------------------------------- iTunes 7.3.x - Heap overflow in album cover parsing Vendor: Apple, Inc. Vendor URL: http://www.apple.com Versions affected: Confirmed in iTunes 7.3.2 Systems Affected:...

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...