https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T20:52:29.827383+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-5vf5-jrp9-rv6g GHSA-5vf5-jrp9-rv6g 2026-10-29T20:52:29.828258+00:00

The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its comment-management requests, allowing attackers to delete photo comments by tricking a logged-in user who holds comment-moderation rights into loading a crafted page.