CVE-2026-17014 - CERT CVE

  1. CVE-2026-17014

ID CVE-2026-17014
Sažetak The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores.
Reference
CVSS
Base: 0.0
Impact: None
Exploitability:None
Pristup
VektorSloženostAutentikacija
None None None
Impact
PovjerljivostCjelovitostDostupnost
None None None
CVSS vektor None
Zadnje važnije ažuriranje 09-08-2026 - 06:18
Objavljeno 09-08-2026 - 06:18