Skip to content
Noroxi

meowapps records

24 published records for vendor meowapps.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
58.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2023-51409
    58Plan

    WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    meowapps · ai engineApr 12, 2024

  • CVE-2025-5071
    35Monitor

    AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP

    HighCVSS 8.8No exploitEPSS 0%

    meowapps · ai engineJun 19, 2025

  • CVE-2024-43332
    35Monitor

    WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    meowapps · photo engineNov 1, 2024

  • CVE-2021-24465
    32Monitor

    Meow Gallery < 4.1.9 - Contributor+ SQL Injection

    HighCVSS 8.1No exploitEPSS 1%

    meowapps · meow galleryOct 4, 2021

  • CVE-2025-6238
    32Monitor

    AI Engine 2.8.4 - Insecure OAuth Implementation

    HighCVSS 8.0No exploitEPSS 0%

    meowapps · ai engineJul 3, 2025

  • CVE-2023-44982
    30Monitor

    WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 1%

    meowapps · perfect imagesDec 18, 2023

  • CVE-2023-44991
    30Monitor

    WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    meowapps · media file renamer - auto \& manual renameDec 19, 2023

  • CVE-2023-51508
    30Monitor

    WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    meowapps · database cleanerJan 8, 2024

  • CVE-2024-0699
    28Monitor

    AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url

    HighCVSS 7.2No exploitEPSS 1%

    meowapps · ai engineFeb 5, 2024

  • CVE-2024-34440
    28Monitor

    WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    meowapps · ai engineMay 14, 2024

  • CVE-2024-6451
    28Monitor

    AI Engine < 2.5.1 - Admin+ RCE

    HighCVSS 7.2No exploitEPSS 0%

    meowapps · ai engineAug 19, 2024

  • CVE-2024-29100
    28Monitor

    WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    meowapps · ai engineMar 28, 2024

  • CVE-2024-10499
    28Monitor

    AI-Engine < 2.6.5 - Admin+ SQLi

    HighCVSS 7.2No exploitEPSS 0%

    meowapps · ai engineDec 12, 2024

  • CVE-2024-38791
    28Monitor

    WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    meowapps · ai engineAug 1, 2024

  • CVE-2024-29090
    27Monitor

    WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 6.8No exploitEPSS 0%

    meowapps · ai engineMar 28, 2024

  • CVE-2018-20983
    24Monitor

    The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    meowapps · wp retina 2xAug 22, 2019

  • CVE-2018-0511
    24Monitor

    Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unsp

    MediumCVSS 6.1No exploitEPSS 0%

    meowapps · wp retina 2xFeb 1, 2018

  • CVE-2021-34652
    24Monitor

    Media Usage <= 0.0.4 Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    meowapps · media usageAug 16, 2021

  • CVE-2023-38513
    21Monitor

    WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)

    MediumCVSS 5.4No exploitEPSS 0%

    meowapps · photo engineDec 20, 2023

  • CVE-2025-5570
    21Monitor

    AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    meowapps · ai engineJul 7, 2025

  • CVE-2024-35712
    19Monitor

    WordPress Database Cleaner: Clean, Optimize & Repair plugin <= 1.0.5 - Arbitrary File Read vulnerability

    MediumCVSS 4.9No exploitEPSS 0%

    meowapps · database cleanerJun 10, 2024

  • CVE-2023-2580
    19Monitor

    AI-Engine < 1.6.83 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    meowapps · ai engineJun 27, 2023

  • CVE-2024-6723
    18Monitor

    AI Engine < 2.4.8 - Admin+ SQLi

    MediumCVSS 4.7No exploitEPSS 0%

    meowapps · ai engineSep 13, 2024

  • CVE-2021-36850
    17Monitor

    WordPress Media File Renamer – Auto & Manual Rename plugin <= 5.1.9 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    meowapps · media file renamer - auto \& manual renameOct 4, 2021