Jordy Meow
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AI Engine: ChatGPT Chatbot | 5 | – | Aug 1, 2024 |
| Photo Engine | 4 | – | Mar 25, 2026 |
| AI Engine | 3 | – | Sep 23, 2026 |
| Meow Gallery | 2 | – | Mar 13, 2026 |
| Code Engine | 2 | – | Aug 20, 2025 |
| Gallery Custom Links | 1 | – | Sep 26, 2025 |
| Media Alt Renamer | 1 | – | Feb 29, 2024 |
| Media File Renamer: Rename Files (Manual, Auto & AI) | 1 | – | Dec 19, 2023 |
| Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina) | 1 | – | Dec 19, 2023 |
| Photo Engine (Media Organizer & Lightroom) | 1 | – | Dec 20, 2023 |
| WP Media Cleaner | 1 | – | May 2, 2024 |
| AI Engine (Pro) | 1 | – | Apr 8, 2026 |
| Database Cleaner | 1 | – | Jun 10, 2024 |
| Database Cleaner: Clean, Optimize & Repair | 1 | – | Jan 8, 2024 |
| Gallery | 1 | – | Feb 17, 2025 |
Exploited and recent CVEs
- CVE-2026-93623 WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2026-65545 WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-39506 WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability 0.2%
- CVE-2026-32524 WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability 0.3%
- CVE-2026-32418 WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerability 0.3%
- CVE-2026-23802 WordPress AI Engine plugin <= 3.3.2 - Arbitrary File Upload vulnerability 0.5%
- CVE-2025-60104 WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-48169 WordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) Vulnerability 0.5%
- CVE-2025-54672 WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2025-50043 WordPress Code Engine plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-47449 WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
- CVE-2025-26778 WordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-43332 WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability 0.5%
- CVE-2024-39660 WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-38791 WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2024-35712 WordPress Database Cleaner: Clean, Optimize & Repair plugin <= 1.0.5 - Arbitrary File Read vulnerability 0.6%
- CVE-2024-34440 WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability 0.8%
- CVE-2024-33922 WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability 0.4%
- CVE-2023-51409 WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability 63.1%
- CVE-2024-29090 WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability 0.9%
- CVE-2024-29100 WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability 0.6%
- CVE-2024-1434 WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2023-51508 WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure 0.5%
- CVE-2023-38513 WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR) 0.4%
- CVE-2023-44991 WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure 0.6%
- CVE-2023-44982 WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure 1.4%