CVE-2025-47449: WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Meow Gallery allows Stored XSS. This issue affects Meow Gallery: from n/a through 5.2.7.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through <= 5.2.7.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47449?
CVE-2025-47449 is classified as a Stored XSS vulnerability, which can lead to serious security risks if exploited.
How do I fix CVE-2025-47449?
To fix CVE-2025-47449, update the Meow Gallery plugin to version 5.2.8 or later.
What does CVE-2025-47449 affect?
CVE-2025-47449 affects Meow Gallery versions from n/a through 5.2.7.
What type of vulnerability is CVE-2025-47449?
CVE-2025-47449 is an improper neutralization of input during web page generation, categorized as a Cross-site Scripting (XSS) vulnerability.
Can CVE-2025-47449 impact WordPress sites?
Yes, CVE-2025-47449 can impact WordPress sites using Meow Gallery versions from n/a through 5.2.7.