Jordy Meow vulnerabilities
28 vulnerabilities
Known vulnerabilities in Jordy Meow products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
Products
14 of 17- Photo Engine4 vulnerabilities
- AI Engine3 vulnerabilities
- Code Engine2 vulnerabilities
- Meow Gallery2 vulnerabilities
- AI Engine (Pro)1 vulnerabilities
- Database Cleaner1 vulnerabilities
- Gallery1 vulnerabilities
- Gallery Custom Links1 vulnerabilities
- Media Alt Renamer1 vulnerabilities
- Media File Renamer1 vulnerabilities
- Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina)1 vulnerabilities
- Photo Engine (Media Organizer & Lightroom)1 vulnerabilities
- WP Media Cleaner1 vulnerabilities
- WP Retina 2X1 vulnerabilities
CVE-2018-0511jordy meowwp retina 2x+2
EPSS score0.90%
Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.CVE-2025-54672jordy meowphoto engine+1EPSS score0.14%
Cross-Site Request Forgery (CSRF) vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through <= 6.4.3.CVE-2025-26778jordy meowgallery+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery gallery allows Stored XSS.This issue affects Gallery: from n/a through <= 2.2.1.CVE-2025-47449jordy meowmeow gallery+1EPSS score0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through <= 5.2.7.CVE-2025-48169jordy meowcode engine+1EPSS score0.45%
Improper Control of Generation of Code ('Code Injection') vulnerability in Jordy Meow Code Engine code-engine allows Remote Code Inclusion.This issue affects Code Engine: from n/a through <= 0.3.3.CVE-2025-50043jordy meowcode engine+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Code Engine code-engine allows Stored XSS.This issue affects Code Engine: from n/a through <= 0.3.2.CVE-2025-60104jordy meowgallery custom links+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Gallery Custom Links gallery-custom-links allows Stored XSS.This issue affects Gallery Custom Links: from n/a through <= 2.2.5.CVE-2014-2040jordy_meowmedia_file_renamer+1EPSS score1.62%
Multiple cross-site scripting (XSS) vulnerabilities in the (1) callback_multicheck, (2) callback_radio, and (3) callback_wysiwygin functions in mfrh_class.settings-api.php in the Media File Renamer plugin 1.7.0 for WordPress allow remote authenticated users with permissions to add media or edit media to inject arbitrary web script or HTML via unspecified parameters, as demonstrated by the title of an uploaded file.CVE-2024-1434jordy meowmedia alt renamer+2EPSS score0.34%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Media Alt Renamer allows Stored XSS.This issue affects Media Alt Renamer: from n/a through 0.0.1.CVE-2024-39660jordy meowphoto engine+1EPSS score0.26%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1.CVE-2024-43332jordy meowphoto engine+2EPSS score0.55%
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.CVE-2024-29090jordy meowai engine: chatgpt chatbot+2EPSS score0.89%
Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.CVE-2024-29100jordy meowai engine: chatgpt chatbot+1EPSS score0.64%
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.CVE-2024-38791jordy meowai engine: chatgpt chatbot+2EPSS score0.22%
Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7.CVE-2024-34440jordy meowai engine: chatgpt chatbot+2EPSS score0.82%
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63.CVE-2024-35712jordy meowdatabase cleaner+2EPSS score0.56%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jordy Meow Database Cleaner allows Relative Path Traversal.This issue affects Database Cleaner: from n/a through 1.0.5.CVE-2024-33922jordy meowwp media cleaner+1EPSS score0.44%
Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2.CVE-2026-65545jordy meowai engine+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.CVE-2026-39506jordy meowai engine (pro)+1EPSS score0.23%
Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2.CVE-2026-93623jordy meowai engine+1EPSS score0.23%
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.