{"uuid": "79868b9c-47dd-4678-be9a-5abf5a8a0170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309704660186325", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:20:46.499189Z"}