CVE-2026-54829

HighCVSS 7.5/10Last modified Jun 25, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt WP Photo Album Plus allows Blind SQL Injection.

This issue affects WP Photo Album Plus: from n/a through 9.1.13.005.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 25, 2026
Last modified
Jun 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-54839.9A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOACVE-2026-548307.5Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions.CVE-2026-548319.3Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.CVE-2026-548327.5Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions.CVE-2026-548337.4Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions.CVE-2026-548347.5Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions.CVE-2026-548357.5Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions.CVE-2026-548369.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YMC Filter allows SQL Injection. ThisCVE-2026-548377.5Unauthenticated Broken Access Control in Intranet &amp; Private Site &#8211; All-In-One Intranet <= 1.8.1 versions.CVE-2026-548388.5Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.CVE-2026-548397.5Unauthenticated Sensitive Data Exposure in Trinity Backup &#8211; Backup, Migrate, Restore, Clone &amp; Schedule Backups <= 2.0.9 versions.CVE-2026-54845.3A weakness has been identified in BookStackApp BookStack up to 26.03. Affected is the function chapterToMarkdown of the file app/Exports/Exp
CVE-2026-54829: High severity, CVSS 7.5 | Vulnix