Exploited vulnerability

CVE-2024-31377

TLP:CLEAR

wppa wp_photo_album_plus Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Photo Album Plus: from n/a through 8.7.01.001.

Facts

Vendor: wppa
Product: wp_photo_album_plus
EPSS (probability of exploitation within 30 days): 0.5 %
First known exploitation: 13 October 2026
First seen by Risk Letters: 13 October 2026

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD