Vulnerabilities

TI-2024-28984 CVE-2024-43332 · GHSA-wwqp-5c8m-77f3

WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00545 Published 2024-11-01 No fix listed CWE-862

TI-2023-19893 CVE-2023-38513 · GHSA-qf25-72qj-2prr

WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)

LOW 31

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine (Media Organizer & Lightroom).This issue affects Photo Engine (Media Organizer & Lightroom): from n/a through 6.2.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00388 Published 2023-12-20 No fix listed CWE-639

Vulnerabilities

Filters

WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability

WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)