CVE-2026-17014 in Photo Album Plus Plugininfo

Zusammenfassung

von MITRE • 09.08.2026

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

WPScan

Reservieren

24.07.2026

Veröffentlichung

09.08.2026

Moderieren

akzeptiert

Eintrag

VDB-387246

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-17014
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-17014
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-17014/

◂ ZurückÜbersichtWeiter ▸

Might our Artificial Intelligence support you?

Check our Alexa App!