Meowapps vulnerabilities

Products

• Ai Engine 13
• Database Cleaner 2
• Media File Renamer - Auto \& Manual Rename 2
• Photo Engine 2
• Wp Retina 2x 2

Newest

• meowapps ai engine, tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress +1 more AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter CVE-2025-5570 5.4 MediumJuly 8, 2025
• jordy meow ai engine AI Engine 2.8.4 - Insecure OAuth Implementation CVE-2025-6238 8.0 HighJuly 4, 2025
• jordy meow ai engine AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP CVE-2025-5071 8.8 HighJune 19, 2025
• jordy meow ai engine AI-Engine < 2.6.5 - Admin+ SQLi CVE-2024-10499 7.2 HighDecember 12, 2024
• jordy meow photo engine WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability CVE-2024-43332 4.3 MediumNovember 1, 2024
• jordy meow ai engine AI Engine < 2.4.8 - Admin+ SQLi CVE-2024-6723 4.7 MediumSeptember 13, 2024
• ai engine project engine, jordy meow ai engine +1 more AI Engine < 2.5.1 - Admin+ RCE CVE-2024-6451 7.2 HighAugust 19, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 more WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-38791 4.9 MediumAugust 1, 2024
• jordy meow database cleaner WordPress Database Cleaner: Clean, Optimize & Repair plugin <= 1.0.5 - Arbitrary File Read vulnerability CVE-2024-35712 4.9 MediumJune 10, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 more WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability CVE-2024-34440 9.1 CriticalMay 13, 2024
• ai engine project engine, jordy meow ai engine: chatgpt chatbot, meowapps ai engine +2 more WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability CVE-2023-51409 Public exploit EPSS 63.1% 10.0 CriticalApril 12, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine, jordy meow ai-engine +2 more WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-29090 6.8 MediumMarch 28, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine, jordy meow ai-engine chatgpt chatbot +2 more WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability CVE-2024-29100 9.1 CriticalMarch 28, 2024
• meowapps ai engine, tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress +1 more AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url CVE-2024-0699 6.6 MediumFebruary 5, 2024
• jordy meow database cleaner: clean, optimize & repair, database cleaner +1 more WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure CVE-2023-51508 5.3 MediumJanuary 8, 2024
• jordy meow photo engine (media organizer & lightroom), meowapps photo engine +1 more WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR) CVE-2023-38513 5.4 MediumDecember 20, 2023
• jordy meow media file renamer: rename files (manual, auto & ai), meowapps media file renamer - auto \& manual rename +1 more WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure CVE-2023-44991 6.5 MediumDecember 19, 2023
• jordy meow perfect images (manage image sizes, thumbnails, replace, retina), meowapps perfect images +1 more WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure CVE-2023-44982 5.3 MediumDecember 19, 2023
• meowapps ai engine, unknown ai engine: chatgpt chatbot, content generator, gpt 3 & 4, ultra-customizable +1 more AI-Engine < 1.6.83 - Admin+ Stored XSS CVE-2023-2580 4.8 MediumJune 27, 2023
• meow apps media file renamer – auto & manual rename (wordpress plugin), meowapps media file renamer - auto \& manual rename +1 more WordPress Media File Renamer – Auto & Manual Rename plugin <= 5.1.9 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2021-36850 5.4 MediumOctober 4, 2021
• meowapps meow gallery, unknown meow gallery (+ gallery block) +1 more Meow Gallery < 4.1.9 - Contributor+ SQL Injection CVE-2021-24465 8.1 HighOctober 4, 2021
• media usage usage, meowapps media usage +1 more Media Usage <= 0.0.4 Reflected Cross-Site Scripting CVE-2021-34652 6.1 MediumAugust 16, 2021
• meowapps wp retina 2x The wp-retina-2x plugin before 5.2.3 for WordPress has XSS. CVE-2018-20983 6.1 MediumAugust 22, 2019
• jordy meow wp retina 2x Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to... CVE-2018-0511 6.1 MediumFebruary 1, 2018