Advisories · Technology

Jordy Meow Photo Engine.

Every CVE that names Jordy Meow Photo Engine among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-32524 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability
- Jordy Meow Photo Engine
- Unrestricted file upload
Not analysed yet 25 Mar 2026
CVE-2025-54672 CVE record

CVSS 4.3 Medium

WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability
- Jordy Meow Photo Engine
- Cross-site request forgery (CSRF)
Not analysed yet 14 Aug 2025
CVE-2024-43332 CVE record

CVSS 4.3 Medium

WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability
- Jordy Meow Photo Engine
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2024-39660 CVE record

CVSS 5.9 Medium

WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability
- Jordy Meow Photo Engine
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2024