CVE-2008-0939

no score yetEPSS 4.3%

wordpress photo album plugin: no CVSS score yet. EPSS 4.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are obtained from third party information.

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-02-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wordpress:photo_album_plugin

References

http://me.mywebsight.ws/web/wppa/
http://secunia.com/advisories/28988
http://securityreason.com/securityalert/3693
http://weblogtoolscollection.com/archives/2008/02/21/photo-album-plugin-vulnerabilities/
http://www.securityfocus.com/archive/1/488290

Check your stack JSON