6.8 Moyenne

CVE-2026-111971 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and…

Description

The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and gallery names before storing them and outputting them in an administrative dashboard, allowing authenticated users with the author role and above to perform Stored Cross-Site Scripting attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Photo Engine (Media Organizer & Lightroom) 6.5	premières → < 6.5.8	6.5.8

Les 3 CVE de Photo Engine (Media Organizer & Lightroom) →

CVE-2026-115259 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper authorization checks… 4.9 Moyenne CVE-2026-111972 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised… 4.9 Moyenne

Vous utilisez Photo Engine (Media Organizer & Lightroom) ?

Suivre cette CVE Surveiller Photo Engine (Media Organizer & Lightroom) Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2026-111971

Chronologie

Publiée 22 octobre 2026
Dernière modification 22 octobre 2026

Références

wpscan.com wpscan.com

Suivre cette CVE

CVE-2026-111971 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and…

Description

Produits et versions touchés

Autres CVE de Photo Engine (Media Organizer & Lightroom)