CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-4037

The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.7.02.003. This is due to the plugin allowing unauthenticated users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.5%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2024-4037

Wppa » Wp Photo Album Plus » Version: N/A

cpe:2.3:a:wppa:wp_photo_album_plus:-
Wppa » Wp Photo Album Plus » Version: 8.0.00.024

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.00.024
Wppa » Wp Photo Album Plus » Version: 8.0.01.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.01.005
Wppa » Wp Photo Album Plus » Version: 8.0.02.010

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.02.010
Wppa » Wp Photo Album Plus » Version: 8.0.03.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.03.006
Wppa » Wp Photo Album Plus » Version: 8.0.04.007

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.04.007
Wppa » Wp Photo Album Plus » Version: 8.0.05.004

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.05.004
Wppa » Wp Photo Album Plus » Version: 8.0.06.004

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.06.004
Wppa » Wp Photo Album Plus » Version: 8.0.07.018

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.07.018
Wppa » Wp Photo Album Plus » Version: 8.0.08.008

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.08.008
Wppa » Wp Photo Album Plus » Version: 8.0.09.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.09.003
Wppa » Wp Photo Album Plus » Version: 8.0.10.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.0.10.006
Wppa » Wp Photo Album Plus » Version: 8.1.00.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.00.009
Wppa » Wp Photo Album Plus » Version: 8.1.01.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.01.005
Wppa » Wp Photo Album Plus » Version: 8.1.02

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.02
Wppa » Wp Photo Album Plus » Version: 8.1.02.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.02.005
Wppa » Wp Photo Album Plus » Version: 8.1.03

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.03
Wppa » Wp Photo Album Plus » Version: 8.1.03.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.03.003
Wppa » Wp Photo Album Plus » Version: 8.1.04

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.04
Wppa » Wp Photo Album Plus » Version: 8.1.04.004

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.04.004
Wppa » Wp Photo Album Plus » Version: 8.1.05

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.05
Wppa » Wp Photo Album Plus » Version: 8.1.05.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.05.003
Wppa » Wp Photo Album Plus » Version: 8.1.06

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.06
Wppa » Wp Photo Album Plus » Version: 8.1.06.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.06.006
Wppa » Wp Photo Album Plus » Version: 8.1.07

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.07
Wppa » Wp Photo Album Plus » Version: 8.1.07.004

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.07.004
Wppa » Wp Photo Album Plus » Version: 8.1.08

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.08
Wppa » Wp Photo Album Plus » Version: 8.1.08.004

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.08.004
Wppa » Wp Photo Album Plus » Version: 8.1.09

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.09
Wppa » Wp Photo Album Plus » Version: 8.1.09.008

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.09.008
Wppa » Wp Photo Album Plus » Version: 8.1.10

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.10
Wppa » Wp Photo Album Plus » Version: 8.1.10.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.1.10.005
Wppa » Wp Photo Album Plus » Version: 8.2.01

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.01
Wppa » Wp Photo Album Plus » Version: 8.2.01.008

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.01.008
Wppa » Wp Photo Album Plus » Version: 8.2.02

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.02
Wppa » Wp Photo Album Plus » Version: 8.2.02.010

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.02.010
Wppa » Wp Photo Album Plus » Version: 8.2.03

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.03
Wppa » Wp Photo Album Plus » Version: 8.2.03.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.03.006
Wppa » Wp Photo Album Plus » Version: 8.2.04

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.04
Wppa » Wp Photo Album Plus » Version: 8.2.04.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.04.009
Wppa » Wp Photo Album Plus » Version: 8.2.05

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.05
Wppa » Wp Photo Album Plus » Version: 8.2.05.008

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.05.008
Wppa » Wp Photo Album Plus » Version: 8.2.06

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.06
Wppa » Wp Photo Album Plus » Version: 8.2.06.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.06.006
Wppa » Wp Photo Album Plus » Version: 8.2.07

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.07
Wppa » Wp Photo Album Plus » Version: 8.2.07.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.07.003
Wppa » Wp Photo Album Plus » Version: 8.2.08

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.08
Wppa » Wp Photo Album Plus » Version: 8.2.08.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.08.006
Wppa » Wp Photo Album Plus » Version: 8.2.09.103

cpe:2.3:a:wppa:wp_photo_album_plus:8.2.09.103
Wppa » Wp Photo Album Plus » Version: 8.3.01

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.01
Wppa » Wp Photo Album Plus » Version: 8.3.01.010

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.01.010
Wppa » Wp Photo Album Plus » Version: 8.3.02

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.02
Wppa » Wp Photo Album Plus » Version: 8.3.02.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.02.005
Wppa » Wp Photo Album Plus » Version: 8.3.03

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.03
Wppa » Wp Photo Album Plus » Version: 8.3.03.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.03.009
Wppa » Wp Photo Album Plus » Version: 8.3.04

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.04
Wppa » Wp Photo Album Plus » Version: 8.3.04.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.04.009
Wppa » Wp Photo Album Plus » Version: 8.3.05

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.05
Wppa » Wp Photo Album Plus » Version: 8.3.05.006

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.05.006
Wppa » Wp Photo Album Plus » Version: 8.3.06

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.06
Wppa » Wp Photo Album Plus » Version: 8.3.06.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.06.003
Wppa » Wp Photo Album Plus » Version: 8.3.07

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.07
Wppa » Wp Photo Album Plus » Version: 8.3.07.004

cpe:2.3:a:wppa:wp_photo_album_plus:8.3.07.004
Wppa » Wp Photo Album Plus » Version: 8.4.00

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.00
Wppa » Wp Photo Album Plus » Version: 8.4.00.001

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.00.001
Wppa » Wp Photo Album Plus » Version: 8.4.01

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.01
Wppa » Wp Photo Album Plus » Version: 8.4.01.008

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.01.008
Wppa » Wp Photo Album Plus » Version: 8.4.02

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.02
Wppa » Wp Photo Album Plus » Version: 8.4.02.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.02.009
Wppa » Wp Photo Album Plus » Version: 8.4.03.012

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.03.012
Wppa » Wp Photo Album Plus » Version: 8.4.04.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.4.04.003
Wppa » Wp Photo Album Plus » Version: 8.5.01

cpe:2.3:a:wppa:wp_photo_album_plus:8.5.01
Wppa » Wp Photo Album Plus » Version: 8.5.01.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.5.01.009
Wppa » Wp Photo Album Plus » Version: 8.5.02

cpe:2.3:a:wppa:wp_photo_album_plus:8.5.02
Wppa » Wp Photo Album Plus » Version: 8.5.02.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.5.02.005
Wppa » Wp Photo Album Plus » Version: 8.5.03.012

cpe:2.3:a:wppa:wp_photo_album_plus:8.5.03.012
Wppa » Wp Photo Album Plus » Version: 8.6.01

cpe:2.3:a:wppa:wp_photo_album_plus:8.6.01
Wppa » Wp Photo Album Plus » Version: 8.6.01.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.6.01.005
Wppa » Wp Photo Album Plus » Version: 8.6.03.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.6.03.005
Wppa » Wp Photo Album Plus » Version: 8.6.04.009

cpe:2.3:a:wppa:wp_photo_album_plus:8.6.04.009
Wppa » Wp Photo Album Plus » Version: 8.6.05.005

cpe:2.3:a:wppa:wp_photo_album_plus:8.6.05.005
Wppa » Wp Photo Album Plus » Version: 8.7.00.003

cpe:2.3:a:wppa:wp_photo_album_plus:8.7.00.003

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-4037

Products

Pricing

Contact Us