Vulnerabilidades de Jordy Meow
CVEs publicadas que afetam produtos de Jordy Meow: 7 registro(s), com severidade, exploração e correções.
CVE-2026-93623
Média · 5.3
CWE-639 23/09/2026
WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.
CVE-2026-65545
Alta · 7.1
CWE-79 06/08/2026
WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
CVE-2026-39506
Média · 4.3
CWE-862 08/04/2026
WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2.
CVE-2026-32524
Crítica · 9.1
CWE-434 25/03/2026
Upload irrestrito de arquivo perigoso no plugin wplr-sync do Jordy Meow Photo Engine
Vulnerabilidade de Upload Irrestrito de Arquivo com Tipo Perigoso em Jordy Meow Photo Engine wplr-sync permite Upload de Web Shell para um Servidor Web.Esta questão afeta Photo Engine: de n/a até <= 6.4.9.
CVE-2026-32418
Alta · 7.6
CWE-89 13/03/2026
WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Blind SQL Injection.This issue affects Meow Gallery: from n/a through <= 5.4.4.
CVE-2026-23802
Crítica · 9.1
CWE-434 05/03/2026
WordPress AI Engine plugin <= 3.3.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2.
CVE-2025-60104
Média · 5.9
CWE-79 26/09/2025
WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n/a through <= 2.2.5.