Skip to contentJordy Meow Photo Engine vulnerabilities
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.6.2 - Author+ Stored XSS via Keyword NamesCVE-2026-1236676.4 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.6.2 - Author+ Media Deletion via Collection DeletionCVE-2026-1236664.9 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine (Media Organizer & Lightroom) <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection NameCVE-2026-1205756.4 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDORCVE-2026-1152594.9 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDORCVE-2026-1119724.9 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine < 6.5.8 - Author+ Stored XSS via Collection NameCVE-2026-1119716.8 Medium
- jordy meow photo engine (media organizer & lightroom)Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' actionCVE-2026-1077706.8 Medium
- jordy meow photo engineWordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerabilityCVE-2026-325249.1 Critical
- jordy meow photo engineWordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-546724.3 Medium
- jordy meow photo engineWordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerabilityCVE-2024-433324.3 Medium
- jordy meow photo engineWordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-396605.9 Medium
- jordy meow photo engine (media organizer & lightroom), meowapps photo engine +1 moreWordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)CVE-2023-385135.4 Medium