WordPress WP Photo Album Plus plugin <= 9.1.05.008 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Photo Album Plus versions = 9.1.05.008...

CVE-2025-14835

CVE-2025-14835 concerns the WP Photo Album Plus WordPress plugin. The vulnerability is a Reflected Cross‑Site Scripting via the shortcode parameter in all versions up to 9.1.05.008, caused by insufficient input sanitization and output escaping. It is an unauthenticated issue that can allow an att...

WordPress plugin WP Photo Album Plus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...