CVE-2026-10095

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-10095

CVE-2026-10095 affects the WP Photo Album Plus plugin for WordPress. The flaw is a Stored Cross-Site Scripting (XSS) via the subtext parameter in all versions up to and including 9.1.13.005, caused by insufficient input sanitization and output escaping. An authenticated attacker with contributor-...

CVE-2026-10095

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-10095 WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-40942

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-10095 WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-54612

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus versions prior to 9.1.13.006 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. An attacker can inje...

CVE-2026-10095: Improper Neutralization of Input During Web Page Generation

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtext' parameter in all versions up to, and including, 9.1.13.005 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WS-2020-0038

Versions of @commercial/subtext prior to 5.1.2 are vulnerable to Prototype Pollution. A multipart payload can be constructed in a way that one of the parts’ content can be set as the entire payload object’s prototype. If this prototype contains data, it may bypass other validation rules which...

WS-2020-0034

Versions of @hapi/subtext prior to 6.1.3 or 7.0.3 are vulnerable to Prototype Pollution. A multipart payload can be constructed in a way that one of the parts’ content can be set as the entire payload object’s prototype. If this prototype contains data, it may bypass other validation rules which...

WS-2020-0033

All versions of subtext are vulnerable to Prototype Pollution. A multipart payload can be constructed in a way that one of the parts’ content can be set as the entire payload object’s prototype. If this prototype contains data, it may bypass other validation rules which enforce access and privacy...

500px-display-simulator (0.0.1-SNAPSHOT), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +702 more potentially affected by unknown CVE via subtext (>=1.1.1, <=4.4.1)

subtext NPM version =1.1.1, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.1.0, =1.2.2, =1.0.8-rc.1, =13.5.1, =1.0.0-alpha.1, =4.0.5, =0.6.0, =0.1.1, =0.1.0, =16.1.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2020-0033...

3nit-utils (>=0.11.1, <=0.23.0), @alinasoft/db (>=0.0.1, <=0.2.0) +691 more potentially affected by unknown CVE via subtext (6.0.12)

subtext NPM version 6.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on subtext and may be impacted: - 3nit-utils =0.11.1, =0.0.1, =0.9.0, =1.2.7, =0.0.1, =1.2.2-rc.0, =0.1.0, =2.2.0-alpha.6, =0.2.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =2.2.0-alpha.8 an...

WS-2020-0031

Version 5.1.1 of @commercial/subtext is vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to catching expecte...

WS-2020-0032

Versions of subtext =4.1.0 are vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to catching expected...

500px-display-simulator (0.0.1-SNAPSHOT), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +404 more potentially affected by unknown CVE via subtext (4.4.1)

subtext NPM version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on subtext and may be impacted: - 500px-display-simulator 0.0.1-SNAPSHOT - @aaa-backend-stack/graphql-rest-bindings =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.1.0, =1.2.2, =1.0.8-rc.1,...

3nit-utils (>=0.11.1, <=0.23.0), @alinasoft/db (>=0.0.1, <=0.2.0) +691 more potentially affected by unknown CVE via subtext (6.0.12)

subtext NPM version 6.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on subtext and may be impacted: - 3nit-utils =0.11.1, =0.0.1, =0.9.0, =1.2.7, =0.0.1, =1.2.2-rc.0, =0.1.0, =2.2.0-alpha.6, =0.2.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =2.2.0-alpha.8 an...

WS-2020-0030

Versions of @hapi/subtext prior to 6.1.3 or 7.0.3 are vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as opposed to...

WS-2019-0271

subtext in all versions is vulnerable to Denial of Service. This is caused by the fact that the package fails to enforce the maxBytes configuration for payloads with chunked encoding that are written to the file system. Which allows attackers to send requests with arbitrary payload sizes. This ma...

500px-display-simulator (0.0.1-SNAPSHOT), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +702 more potentially affected by unknown CVE via subtext (>=1.1.1, <=4.4.1)

subtext NPM version =1.1.1, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.1.0, =1.2.2, =1.0.8-rc.1, =13.5.1, =1.0.0-alpha.1, =4.0.5, =0.6.0, =0.1.1, =0.1.0, =16.1.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0271...