Jordy Meow vulnerabilities and threats

20 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-93623AI Engine (WordPress plugin) · Insecure Direct Object Reference Medium5.3EPSS 0.3%2026-09-23CVE Database V5CVE-2026-93623 Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions. EPSS 0.3%Vulnerability Jordy Meow CWE-639 #ghsa-5g4g-j86c-xv6v	CVE Database V5	2026-09-23
High	7.1	EPSS 0.3%	CVE-2026-65545AI Engine (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-65545 CVE-2026-65545 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability affecting Jordy Meow AI Engine versions up to and including 3.6.8. This vulnerability allows an attacker to inject malicious scripts during web page generation, potentially impacting confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time. EPSS 0.3%Vulnerability Jordy Meow CWE-79 #ghsa-m853-gvx3-8j6r	CVE Database V5	2026-08-06
Medium	4.3	EPSS 0.2%	CVE-2026-39506AI Engine (Pro) (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39506 Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2. EPSS 0.2%Vulnerability Jordy Meow	CVE Database V5	2026-04-08
Critical	9.1	EPSS 0.3%	CVE-2026-32524Photo Engine (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32524 Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow Photo Engine wplr-sync allows Upload a Web Shell to a Web Server.This issue affects Photo Engine: from n/a through <= 6.4.9. EPSS 0.3%Vulnerability Jordy Meow	CVE Database V5	2026-03-25
High	7.6	EPSS 0.3%	CVE-2026-32418Meow Gallery (WordPress plugin) · SQL Injection High7.6EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32418 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Blind SQL Injection.This issue affects Meow Gallery: from n/a through <= 5.4.4. EPSS 0.3%Vulnerability Jordy Meow	CVE Database V5	2026-03-13
Critical	9.1	EPSS 0.5%	CVE-2026-23802AI Engine (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.5%2026-03-05CVE Database V5CVE-2026-23802 Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2. EPSS 0.5%Vulnerability Jordy Meow	CVE Database V5	2026-03-05
Medium	5.9	EPSS 0.2%	CVE-2025-60104Gallery Custom Links (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-09-26CVE Database V5CVE-2025-60104 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n/a through <= 2.2.5. EPSS 0.2%Vulnerability Jordy Meow CWE-79	CVE Database V5	2025-09-26
Critical	9.9	EPSS 0.5%	CVE-2025-48169Code Engine (WordPress plugin) · Code Injection Critical9.9EPSS 0.5%2025-08-20CVE Database V5CVE-2025-48169 Improper Control of Generation of Code ('Code Injection') vulnerability in Jordy Meow Code Engine code-engine allows Remote Code Inclusion.This issue affects Code Engine: from n/a through <= 0.3.3. EPSS 0.5%Vulnerability Jordy Meow	CVE Database V5	2025-08-20
Medium	4.3	EPSS 0.2%	CVE-2025-54672Photo Engine (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54672 Cross-Site Request Forgery (CSRF) vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through <= 6.4.3. EPSS 0.2%Vulnerability Jordy Meow	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-50043Code Engine (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-06-20CVE Database V5CVE-2025-50043 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Code Engine code-engine allows Stored XSS.This issue affects Code Engine: from n/a through <= 0.3.2. EPSS 0.2%Vulnerability Jordy Meow	CVE Database V5	2025-06-20
Medium	5.9	EPSS 0.2%	CVE-2025-26778Gallery (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-02-17CVE Database V5CVE-2025-26778 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery gallery allows Stored XSS.This issue affects Gallery: from n/a through <= 2.2.1. EPSS 0.2%Vulnerability Jordy Meow	CVE Database V5	2025-02-17
Medium	4.3	EPSS 0.5%	CVE-2024-43332Photo Engine (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.5%2024-11-01CVE Database V5CVE-2024-43332 Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0. EPSS 0.5%Vulnerability Jordy Meow CWE-862	CVE Database V5	2024-11-01
Medium	5.9	EPSS 0.3%	CVE-2024-39660Photo Engine (WordPress plugin) · XSS or 'Cross-site Scripting' Medium5.9EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39660 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1. EPSS 0.3%Vulnerability Jordy Meow CWE-79	CVE Database V5	2024-08-01
Medium	4.9	EPSS 0.2%	CVE-2024-38791AI Engine: ChatGPT Chatbot (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2024-08-01CVE Database V5CVE-2024-38791 Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7. EPSS 0.2%Vulnerability Jordy Meow CWE-918	CVE Database V5	2024-08-01
Medium	4.9	EPSS 0.6%	CVE-2024-35712Database Cleaner (WordPress plugin) · Path Traversal Medium4.9EPSS 0.6%2024-06-10CVE Database V5CVE-2024-35712 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jordy Meow Database Cleaner allows Relative Path Traversal.This issue affects Database Cleaner: from n/a through 1.0.5. EPSS 0.6%Vulnerability Jordy Meow CWE-22	CVE Database V5	2024-06-10
Critical	9.1	EPSS 0.8%	CVE-2024-34440AI Engine: ChatGPT Chatbot (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.8%2024-05-13CVE Database V5CVE-2024-34440 Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63. EPSS 0.8%Vulnerability Jordy Meow CWE-434	CVE Database V5	2024-05-13
Medium	5.3	EPSS 0.4%	CVE-2024-33922Jordy Meow WP Media Cleaner · Sensitive Data in Logs Medium5.3EPSS 0.4%2024-05-02CVE Database V5CVE-2024-33922 Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2. EPSS 0.4%Vulnerability CWE-532	CVE Database V5	2024-05-02
Medium	6.8	EPSS 0.9%	CVE-2024-29090AI Engine: ChatGPT Chatbot (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium6.8EPSS 0.9%2024-03-28CVE Database V5CVE-2024-29090 Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4. EPSS 0.9%Vulnerability Jordy Meow CWE-918	CVE Database V5	2024-03-28
Critical	9.1	EPSS 0.6%	CVE-2024-29100AI Engine: ChatGPT Chatbot (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.6%2024-03-28CVE Database V5CVE-2024-29100 Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4. EPSS 0.6%Vulnerability Jordy Meow CWE-434	CVE Database V5	2024-03-28
Medium	5.9	EPSS 0.3%	CVE-2024-1434Media Alt Renamer (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.3%2024-02-29CVE Database V5CVE-2024-1434 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Media Alt Renamer allows Stored XSS.This issue affects Media Alt Renamer: from n/a through 0.0.1. EPSS 0.3%Vulnerability Jordy Meow CWE-79	CVE Database V5	2024-02-29

Page 1 of 1