Photo Engine vulnerabilities

2 known vulnerabilities in Photo Engine from Jordy Meow. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Photo Engine: Unrestricted Upload of File with Dangerous Type

  CVE-2026-32524Mar 25, 2026Jordy Meow

  Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow Photo Engine wplr-sync allows Upload a Web Shell to a Web Server.This issue affects Photo Engine: from n/a through <= 6.4.9.

• 8.8 High severity

  Photo Engine: Missing Authorization

  CVE-2024-43332Nov 1, 2024Jordy Meow

  Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.