Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Meow Gallery 5.5.5 Clear all filters
TI-2026-62335 CVE-2026-92423 · GHSA-4h7x-fhm3-5hmh

Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts

Priority LOW 13

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00316 Published 2026-09-20 Fixed in 5.5.5 CWE-200
TI-2026-62334 CVE-2026-92422 · GHSA-vwxr-fxpw-rxvm

Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route

Priority LOW 34

The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable end…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00159 Published 2026-09-20 Fixed in 5.5.5 CWE-345