Jordy Meow

Products

ProductCVEsExploitedLatest
AI Engine: ChatGPT Chatbot5–Aug 1, 2024
Photo Engine4–Mar 25, 2026
AI Engine3–Sep 23, 2026
Meow Gallery2–Mar 13, 2026
Code Engine2–Aug 20, 2025
Gallery Custom Links1–Sep 26, 2025
Media Alt Renamer1–Feb 29, 2024
Media File Renamer: Rename Files (Manual, Auto & AI)1–Dec 19, 2023
Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina)1–Dec 19, 2023
Photo Engine (Media Organizer & Lightroom)1–Dec 20, 2023
WP Media Cleaner1–May 2, 2024
AI Engine (Pro)1–Apr 8, 2026
Database Cleaner1–Jun 10, 2024
Database Cleaner: Clean, Optimize & Repair1–Jan 8, 2024
Gallery1–Feb 17, 2025

Exploited and recent CVEs

  • CVE-2026-93623 Medium 5.3 WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-65545 High 7.1 WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-39506 Medium 4.3 WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-32524 Critical 9.1 WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability 0.3%
  • CVE-2026-32418 High 7.6 WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerability 0.3%
  • CVE-2026-23802 Critical 9.1 WordPress AI Engine plugin <= 3.3.2 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2025-60104 Medium 5.9 WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-48169 Critical 9.9 WordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) Vulnerability 0.5%
  • CVE-2025-54672 Medium 4.3 WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-50043 Medium 6.5 WordPress Code Engine plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-47449 Medium 5.9 WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-26778 Medium 5.9 WordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-43332 Medium 4.3 WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability 0.5%
  • CVE-2024-39660 Medium 5.9 WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38791 Medium 4.9 WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2024-35712 Medium 4.9 WordPress Database Cleaner: Clean, Optimize & Repair plugin <= 1.0.5 - Arbitrary File Read vulnerability 0.6%
  • CVE-2024-34440 Critical 9.1 WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability 0.8%
  • CVE-2024-33922 Medium 5.3 WordPress WP Media Cleaner plugin <= 6.7.2 - Sensitive Data Exposure via Log File vulnerability 0.4%
  • CVE-2023-51409 Critical 10.0 WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability 63.1%
  • CVE-2024-29090 Medium 6.8 WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability 0.9%
  • CVE-2024-29100 Critical 9.1 WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability 0.6%
  • CVE-2024-1434 Medium 5.9 WordPress Media Alt Renamer Plugin 0.0.1 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-51508 Medium 5.3 WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2023-38513 Medium 5.4 WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR) 0.4%
  • CVE-2023-44991 Medium 6.5 WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure 0.6%
  • CVE-2023-44982 Medium 5.3 WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure 1.4%