# cve.now: Jordy Meow

The newest entries naming Jordy Meow as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-93623](https://cve.now/CVE-2026-93623.md): WordPress AI Engine plugin \<= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
- [CVE-2026-65545](https://cve.now/CVE-2026-65545.md): WordPress AI Engine plugin \<= 3.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-39506](https://cve.now/CVE-2026-39506.md): WordPress AI Engine (Pro) plugin \< 3.4.2 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2026-32524](https://cve.now/CVE-2026-32524.md): WordPress Photo Engine plugin \<= 6.4.9 - Arbitrary File Upload vulnerability (CVSS 9.1)
- [CVE-2026-32418](https://cve.now/CVE-2026-32418.md): WordPress Meow Gallery plugin \<= 5.4.4 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2026-23802](https://cve.now/CVE-2026-23802.md): WordPress AI Engine plugin \<= 3.3.2 - Arbitrary File Upload vulnerability (CVSS 9.1)
- [CVE-2025-60104](https://cve.now/CVE-2025-60104.md): WordPress Gallery Custom Links Plugin \<= 2.2.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
- [CVE-2025-48169](https://cve.now/CVE-2025-48169.md): WordPress Code Engine Plugin \<= 0.3.3 - Remote Code Execution (RCE) Vulnerability (CVSS 9.9)
- [CVE-2025-54672](https://cve.now/CVE-2025-54672.md): WordPress Photo Engine Plugin plugin \<= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
- [CVE-2025-50043](https://cve.now/CVE-2025-50043.md): WordPress Code Engine plugin \<= 0.3.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-47449](https://cve.now/CVE-2025-47449.md): WordPress Meow Gallery plugin \<= 5.2.7 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
- [CVE-2025-26778](https://cve.now/CVE-2025-26778.md): WordPress Gallery Custom Links Plugin \<= 2.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-43332](https://cve.now/CVE-2024-43332.md): WordPress Photo Engine plugin \<= 6.4.0 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-39660](https://cve.now/CVE-2024-39660.md): WordPress Photo Engine (Media Organizer & Lightroom) plugin \<= 6.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-38791](https://cve.now/CVE-2024-38791.md): WordPress AI ENGINE plugin \<= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9)
- [CVE-2024-35712](https://cve.now/CVE-2024-35712.md): WordPress Database Cleaner: Clean, Optimize & Repair plugin \<= 1.0.5 - Arbitrary File Read vulnerability (CVSS 4.9)
- [CVE-2024-34440](https://cve.now/CVE-2024-34440.md): WordPress AI Engine plugin \<= 2.2.63 - Auth. Arbitrary File Upload vulnerability (CVSS 9.1)
- [CVE-2024-33922](https://cve.now/CVE-2024-33922.md): WordPress WP Media Cleaner plugin \<= 6.7.2 - Sensitive Data Exposure via Log File vulnerability (CVSS 5.3)
- [CVE-2023-51409](https://cve.now/CVE-2023-51409.md): WordPress AI Engine plugin \<= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability (CVSS 10.0)
- [CVE-2024-29090](https://cve.now/CVE-2024-29090.md): WordPress AI Engine plugin \<= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.8)
- [CVE-2024-29100](https://cve.now/CVE-2024-29100.md): WordPress AI Engine plugin \<= 2.1.4 - Arbitrary File Upload vulnerability (CVSS 9.1)
- [CVE-2024-1434](https://cve.now/CVE-2024-1434.md): WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-51508](https://cve.now/CVE-2023-51508.md): WordPress Database Cleaner Plugin \<= 0.9.8 is vulnerable to Sensitive Data Exposure (CVSS 5.3)
- [CVE-2023-38513](https://cve.now/CVE-2023-38513.md): WordPress Photo Engine Plugin \<= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 5.4)
- [CVE-2023-44991](https://cve.now/CVE-2023-44991.md): WordPress Media File Renamer Plugin \<= 5.6.9 is vulnerable to Sensitive Data Exposure (CVSS 6.5)
- [CVE-2023-44982](https://cve.now/CVE-2023-44982.md): WordPress WP Retina 2x Plugin \<= 6.4.5 is vulnerable to Sensitive Data Exposure (CVSS 5.3)
- [CVE-2018-0511](https://cve.now/CVE-2018-0511.md): Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unsp (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/jordy-meow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.