Skip to contentJordy Meow Gallery vulnerabilities
- jordy meow meow galleryMeow Gallery <= 5.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute)CVE-2026-92396.4 Medium
- jordy meow meow galleryMeow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST EndpointCVE-2026-137476.5 Medium
- jordy meow gallery custom linksGallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Author Display Name + Comment HTML Comment BodyCVE-2026-1077574.9 Medium
- jordy meow meow galleryMeow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_postsCVE-2026-924232.7 Low
- jordy meow meow galleryMeow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST RouteCVE-2026-924226.5 Medium
- jordy meow meow galleryMeow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-TextCVE-2026-153865.4 Medium
- jordy meow meow galleryMeow Gallery <= 5.4.4 - Missing Authorization to Authenticated (Author+) Shortcode creationCVE-2026-12914.3 Medium
- jordy meow meow galleryWordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerabilityCVE-2026-324187.6 High
- jordy meow gallery custom linksWordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-601045.9 Medium
- jordy meow meow galleryWordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-474495.9 Medium
- jordy meow galleryWordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-267785.9 Medium
- jordy meow meow galleryGallery Block (Meow Gallery) <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-43866.4 Medium