Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

opajaap — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting opajaap. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Opajaap primarily develops web applications and APIs for various industries, with a core focus on custom enterprise solutions. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and misconfigured access controls. While no major public security incidents have been documented, their CVE history reveals consistent patterns of authentication bypass flaws and insecure direct object references. The organization has shown gradual improvement in security practices over time, though legacy components remain potential attack vectors. Their codebase typically demonstrates moderate security hygiene with occasional lapses in session management and parameter sanitization.

Top products by opajaap: WP Photo Album Plus
CVE ID Title CVSS Severity Published
CVE-2026-87909 WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection — WP Photo Album Plus CWE-74 7.5 High 2026-09-19
CVE-2026-18579 WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting — WP Photo Album Plus CWE-79 7.2 High 2026-09-11
CVE-2026-15344 WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter — WP Photo Album Plus CWE-89 4.9 Medium 2026-07-29
CVE-2026-10095 WP Photo Album Plus <= 9.1.13.005 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'subtext' Shortcode Attribute — WP Photo Album Plus CWE-79 6.4 Medium 2026-07-01
CVE-2025-14835 WP Photo Album Plus <= 9.1.05.008 - Reflected Cross-Site Scripting — WP Photo Album Plus CWE-80 7.1 High 2026-01-07
CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload — WP Photo Album Plus CWE-79 5.4 Medium 2025-10-04
CVE-2024-10958 WP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay — WP Photo Album Plus CWE-94 7.3 High 2024-11-10
CVE-2024-9951 Wordpress Photo Album Plus <= 8.8.05.003 - Reflected Cross-Site Scripting — WP Photo Album Plus CWE-79 6.1 Medium 2024-10-17
CVE-2024-4037 WP Photo Album Plus <= 8.7.02.003 - Unauthenticated Arbitrary Shortcode Execution — WP Photo Album Plus CWE-94 6.5 Medium 2024-05-24

This page lists every published CVE security advisory associated with opajaap. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.