SecAlerts
m

meow apps

Security Risk Profile

35
/100
low

Security Risk Score

Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from January 5, 2026 to present

16
Total CVEs
5
Critical+High
0
Exploited
4
Unpatched

Threat Assessment

Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
35/100
low
🆕 1Fresh (<7d)📈 10 in Last 30 Days

Severity Distribution

Critical
1
High
4
Medium
10
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
XSS
4
2
Path Traversal
1
3
Malicious File Upload
1

Most Affected Products

1. Meow Apps AI Engine8
2. Meow Apps Meow Lightbox2
3. Meow Apps AI Engine WordPress plugin1
4. Meow Apps Photo Engine (Media Organizer & Lightroom)1
5. Meow Apps Media Library Organizer1

Recent Vulnerabilities

See more →
CVE-2026-123478
CVSS 7.1high

WordPress AI Engine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerability

Nov 11, 2026🔧 No Patch
CVE-2026-109234
CVSS 7.2high

Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization

Oct 31, 2026🔧 No Patch
CVE-2026-107745
CVSS 4.2medium

AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter

Oct 28, 2026🔧 No Patch
CVE-2026-112828
CVSS 4.3medium

WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerability

Oct 26, 2026🔧 No Patch
CVE-2026-110982
CVSS 4.9medium

AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt

Oct 21, 2026🔧 No Patch
CVE-2026-110976
CVSS 4.9medium

AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media

Oct 18, 2026🔧 No Patch
CVE-2026-111041
CVSS 4.9medium

AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media

Oct 18, 2026🔧 No Patch
CVE-2026-107770
CVSS 6.8medium

Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' action

Oct 16, 2026🔧 No Patch
CVE-2026-110888
CVSS 4.3medium

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Oct 15, 2026🔧 No Patch
CVE-2026-107756
CVSS 6.4medium

Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name

Oct 14, 2026🔧 No Patch

Monitor meow apps in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

meow apps Security Vulnerabilities & Risk Score | 16 CVEs | SecAlerts - SecAlerts