jAlbum Bridge
jAlbum Bridge has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
Every one of the 3 issues recorded for jAlbum Bridge has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Trương Hữu Phúc (truonghuuphuc). jAlbum Bridge is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-30818jAlbum Bridge <= 2.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
jAlbum Bridge
Author
mlaza
jAlbum Bridge: Add stunning slideshows and grid galleries from jAlbum to your WordPress posts and pages. It’s responsive and mobile-friendly. Slideshow transition types: Cross-fade Zoom Ken Burns Slide Swap Stack Flip (3D) Carousel (3D) Book (3D) Cube (3D) Cover flow (3D) Grid-type layouts: Grid Mosaic Strip Masonry Please note that this projector pulls data from a JSON file, which is automatically generated when you make albums with database-driven skins (Tiger, Photoblogger, Projector, Lizard, or Story). However, you can also ask jAlbum to generate this file with any skin; see “Settings / Advanced / Generate JSON data.” (Don’t forget to “Make album” and “Upload” after turning this option on.) If you’re using the album from another site, make sure this site supports Cross Origin Resource Sharing (CORS); otherwise, the projector’s access will be blocked. Note that if the WordPress site is under https, the album site must support HTTPS protocol, too! jAlbum is an album creator desktop application that creates web albums of images on your hard disk. This way, you can manage your photo collection from your PC without needing individual uploads to a remote server. Create albums with folders, custom pages, and external links No limit; you can use tens of thousands of images or videos jAlbum manages the uploads: you can upload to any site (different from your WP site), or you can host them on jalbum.net if you wish Widely customizable albums Tons of features: Google Maps, PayPal cart, Feedback, search, etc. For help with the plugin, visit your-site-here.com → Read more about jAlbum features → Get the jAlbum application from here → jAlbum Bridge forum on jalbum.net → Feedback is welcome, especially the positive 😉
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C