{"uuid": "03474b88-9c6a-430d-9416-817a10ca01ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309780909682788", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:40:03.663950Z"}