What’s Vulnerable › Products

Jordy Meow Photo Engine vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Jordy Meow Photo Engine version is affected

Latest Jordy Meow Photo Engine vulnerabilities

• CVE-2026-32524 — WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability (CVSS 9.1)
• CVE-2025-54672 — WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
• CVE-2024-43332 — WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-39660 — WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2023-38513 — WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 5.4)