MEDIUM Published Sep 30, 2026 CVE-2026-102386 CVE-2026-102386 published: Subscriber Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.003 versions. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch