Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

28 records

Vendor: Jordy Meow Clear all filters
TI-2026-28480 CVE-2026-39506 · GHSA-9jvc-v7pv-fp43

WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00171 Published 2026-04-08 No fix listed CWE-862
TI-2026-25052 CVE-2026-32524 · GHSA-v47h-99v4-c43h

WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability

Priority MEDIUM 41

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow Photo Engine wplr-sync allows Upload a Web Shell to a Web Server.This issue affects Photo Engine: from n/a through <= 6.4.9.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00345 Published 2026-03-25 No fix listed CWE-434
TI-2026-24946 CVE-2026-32418 · GHSA-jmhc-6q49-9x2g

WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Blind SQL Injection.This issue affects Meow Gallery: from n/a through <= 5…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00338 Published 2026-03-13 No fix listed CWE-89
TI-2026-19168 CVE-2026-23802 · GHSA-8rvh-wc8p-mgvr

WordPress AI Engine plugin <= 3.3.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00541 Published 2026-03-05 No fix listed CWE-434
TI-2025-37470 CVE-2025-60104 · GHSA-v662-mm9j-89wr

WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00218 Published 2025-09-26 No fix listed CWE-79
TI-2025-30539 CVE-2025-48169 · GHSA-v322-wc7v-xh7c

WordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) Vulnerability

Priority MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in Jordy Meow Code Engine code-engine allows Remote Code Inclusion.This issue affects Code Engine: from n/a through <= 0.3.3.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00454 Published 2025-08-20 No fix listed CWE-94
TI-2025-31956 CVE-2025-50043 · GHSA-6662-6w2h-w9vv

WordPress Code Engine plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Code Engine code-engine allows Stored XSS.This issue affects Code Engine: from n/a through <= 0.3.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-20 No fix listed CWE-79
TI-2025-29946 CVE-2025-47449 · GHSA-6v7h-jp3c-jxjm

WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through <= 5.2.7.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00272 Published 2025-05-07 No fix listed CWE-79
TI-2024-28984 CVE-2024-43332 · GHSA-wwqp-5c8m-77f3

WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00545 Published 2024-11-01 No fix listed CWE-862
TI-2024-26584 CVE-2024-39660 · GHSA-f34v-3642-4mw8

WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00259 Published 2024-08-01 No fix listed CWE-79
TI-2024-23581 CVE-2024-35712 · GHSA-rwwg-7x85-9vx8

WordPress Database Cleaner: Clean, Optimize & Repair plugin <= 1.0.5 - Arbitrary File Read vulnerability

Priority LOW 23

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jordy Meow Database Cleaner allows Relative Path Traversal.This issue affects Database Cleaner: from n/a through 1.0.5.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00559 Published 2024-06-10 No fix listed CWE-22
TI-2024-19274 CVE-2024-29100 · GHSA-539g-ppw2-7c4r

WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00644 Published 2024-03-28 No fix listed CWE-434
TI-2024-01339 CVE-2024-1434 · GHSA-pm76-25c2-x352

WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Media Alt Renamer allows Stored XSS.This issue affects Media Alt Renamer: from n/a through 0.0.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00336 Published 2024-02-29 No fix listed CWE-79
TI-2023-28160 CVE-2023-51508 · GHSA-hfgf-j9pj-wg8w

WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize & Repair.This issue affects Database Cleaner: Clean, Optimize & Repair: from n/a through 0.9.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2024-01-08 No fix listed CWE-532
TI-2023-24053 CVE-2023-44991 · GHSA-4mqm-8w5p-8gjq

WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure

Priority LOW 34

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files (Manual, Auto & AI).This issue affects Media File Renamer: Rename Files (Manual, Auto & AI): from n/…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00648 Published 2023-12-19 No fix listed CWE-200
Load more