4.9 Moyenne

CVE-2026-111972 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised…

Description

The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised to act on the targeted media attachment, allowing authenticated users with the author role and above to delete arbitrary media attachments, including those uploaded by other users and administrators.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Photo Engine (Media Organizer & Lightroom) 6.5	premières → < 6.5.8	6.5.8

Les 3 CVE de Photo Engine (Media Organizer & Lightroom) →

CVE-2026-115259 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper authorization checks… 4.9 Moyenne CVE-2026-111971 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and… 6.8 Moyenne

Vous utilisez Photo Engine (Media Organizer & Lightroom) ?

Suivre cette CVE Surveiller Photo Engine (Media Organizer & Lightroom) Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2026-111972

Chronologie

Publiée 22 octobre 2026
Dernière modification 22 octobre 2026

Références

wpscan.com wpscan.com

Suivre cette CVE

CVE-2026-111972 The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised…

Description

Produits et versions touchés

Autres CVE de Photo Engine (Media Organizer & Lightroom)