Aller au contenu
Se connecter
6.5 Moyenne

CVE-2026-92422 The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating…

Description

The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered shortcodes and disclose non-public gallery content.

Produits et versions touchés

Produit Versions touchées Corrigé en
Meow Gallery 5.5 premières → < 5.5.5 5.5.5

Autres CVE de Meow Gallery

Les 3 CVE de Meow Gallery →
CVE-2026-92423 The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the… 2.7 Faible CVE-2026-15386 The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an… 5.4 Moyenne
Suivre cette CVE