p
photo engine
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 22, 2026 to present
5
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
45/100
medium
🆕 2Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
0High
0Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
3
Most Affected Products
1. Photo Engine Photo Engine (Media Organizer & Lightroom)3
2. Photo Engine Photo Engine (Media Organizer & Lightroom) WordPress plugin2
Recent Vulnerabilities
See more →CVE-2026-123666
CVSS 4.9medium
Photo Engine < 6.6.2 - Author+ Media Deletion via Collection Deletion
Nov 11, 2026🔧 No Patch
CVE-2026-123667
CVSS 6.4medium
Photo Engine < 6.6.2 - Author+ Stored XSS via Keyword Names
Nov 11, 2026🔧 No Patch
CVE-2026-120575
CVSS 6.4medium
Photo Engine (Media Organizer & Lightroom) <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Collection Name
Nov 3, 2026🔧 No Patch
CVE-2026-111971
CVSS 6.8medium
Photo Engine < 6.5.8 - Author+ Stored XSS via Collection Name
Oct 22, 2026🔧 No Patch
CVE-2026-111972
CVSS 4.9medium
Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR
Oct 22, 2026🔧 No Patch
Monitor photo engine in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.