Skip to contentJordy Meow vulnerabilities
Newest
- jordy meow ai engineWordPress AI Engine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1234787.1 High
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.6.2 - Author+ Stored XSS via Keyword NamesCVE-2026-1236676.4 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.6.2 - Author+ Media Deletion via Collection DeletionCVE-2026-1236664.9 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine (Media Organizer & Lightroom) <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection NameCVE-2026-1205756.4 Medium
- jordy meow meow galleryMeow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute)CVE-2026-92396.4 Medium
- jordy meow meow galleryMeow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST EndpointCVE-2026-137476.5 Medium
- jordy meow ai engineWordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-655668.8 High
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDORCVE-2026-1152594.9 Medium
- jordy meow ai engineWordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerabilityCVE-2026-1128284.3 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDORCVE-2026-1119724.9 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.5.8 - Author+ Stored XSS via Collection NameCVE-2026-1119716.8 Medium
- jordy meow ai engineAI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerptCVE-2026-1109824.9 Medium
- jordy meow ai engineAI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_mediaCVE-2026-1110414.9 Medium
- jordy meow ai engineAI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_mediaCVE-2026-1109764.9 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' actionCVE-2026-1077706.8 Medium
- jordy meow ai engineWordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerabilityCVE-2026-1108884.3 Medium
- jordy meow gallery custom linksGallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Author Display Name + Comment HTML Comment BodyCVE-2026-1077574.9 Medium
- jordy meow ai engineWordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-936235.3 Medium
- jordy meow meow galleryMeow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_postsCVE-2026-924232.7 Low
- jordy meow meow galleryMeow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST RouteCVE-2026-924226.5 Medium
- jordy meow ai engineAI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor AssistantCVE-2026-757985.3 Medium
- jordy meow ai engineAI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' ParameterCVE-2026-757977.7 High
- jordy meow ai engineAI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User ToolsCVE-2026-757967.2 High
- jordy meow ai engineAI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio TranscriptionCVE-2026-169555.0 Medium
- jordy meow ai engineAI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session CookieCVE-2026-169534.8 Medium
- jordy meow meow galleryMeow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-TextCVE-2026-153865.4 Medium
- jordy meow ai engineWordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-655457.1 High
- jordy meow ai engineAI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer TokensCVE-2026-169546.5 Medium
- jordy meow ai engineAI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDORCVE-2026-125105.9 Medium
- jordy meow ai engineAI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path TraversalCVE-2026-125118.1 High
- jordy meow ai engineWordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerabilityCVE-2026-274077.2 High
- jordy meow meow galleryMeow Gallery <= 5.4.4 - Missing Authorization to Authenticated (Author+) Shortcode creationCVE-2026-12914.3 Medium
- jordy meow ai engine (pro)WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerabilityCVE-2026-395064.3 Medium
- jordy meow photo engineWordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerabilityCVE-2026-325249.1 Critical
- jordy meow meow galleryWordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerabilityCVE-2026-324187.6 High
- jordy meow ai engineWordPress AI Engine plugin <= 3.3.2 - Arbitrary File Upload vulnerabilityCVE-2026-238029.1 Critical
- jordy meow gallery custom linksWordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-601045.9 Medium
- jordy meow code engineWordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) VulnerabilityCVE-2025-481699.9 Critical
- jordy meow photo engineWordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-546724.3 Medium
- jordy meow ai engineAI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-7847Public exploit8.8 High
- jordy meow ai engineAI Engine 2.8.4 - Insecure OAuth ImplementationCVE-2025-62388.0 High
- jordy meow code engineWordPress Code Engine plugin <= 0.3.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-500436.5 Medium
- jordy meow ai engineAI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCPCVE-2025-50718.8 High
- jordy meow meow galleryWordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-474495.9 Medium
- jordy meow galleryWordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-267785.9 Medium
- jordy meow ai engineAI-Engine < 2.6.5 - Admin+ SQLiCVE-2024-104997.2 High
- jordy meow photo engineWordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerabilityCVE-2024-433324.3 Medium
- jordy meow ai engineAI Engine < 2.4.8 - Admin+ SQLiCVE-2024-67234.7 Medium
- ai engine project engine, jordy meow ai engine +1 moreAI Engine < 2.5.1 - Admin+ RCECVE-2024-64517.2 High
- jordy meow photo engineWordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-396605.9 Medium
- Show olderLoading…