CVE-2026-6379: WP Photo Album Plus Unauthenticated SQL Injection (CVSS 7.5)

CVE-2026-6379 is a CVSS 7.5 (High) unauthenticated SQL injection in WP Photo Album Plus <= 9.1.10.011. Any visitor can extract sensitive data from the database without logging in.