4.3
Medium
CVE-2024-43332 Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Photo Engine 6.4 | earliest → 6.4.0 | No fix stated |
Other CVEs of Photo Engine
The 4 CVEs of Photo Engine →
CVE-2026-32524
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow Photo Engine wplr-sync allows Upload a Web…
9.1
Critical
CVE-2025-54672
Cross-Site Request Forgery (CSRF) vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request…
4.3
Medium
CVE-2024-39660
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jordy…
5.9
Medium