Beveiligingsadvies

CVE-2026-17014

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-09 06:00:12

Laatst bijgewerkt 2026-08-11 19:48:17

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores.

← Alle CVE's bekijken Bekijk op cve.org ↗