WP-PhotoNav

WP-PhotoNav has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WP-PhotoNav has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Gilang - DJ.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all WP-PhotoNav vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-6383

WP-PhotoNav <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photonav Shortcode

Read the full analysis

Vulnerability Records

1 records


2025-06-25 13:51	WP-PhotoNav <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photonav Shortcode WP-PhotoNav <= 1.2.2	`CVE-2025-6383`	6.4 Medium	Gilang - DJ	No

Showing 1–1 of 1 reports