Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

7 matching records.

1. 21
   CVE NVD 26h ago

   The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all…

   The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and…

   CVSS 7.2 CVE-2026-109234 Tigroumeow Web platform
2. 21
   CVE NVD 38h ago

   The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7.

   The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible…

   CVSS 8.7 CVE-2025-8574 Tigroumeow Web platform
3. 21
   CVE NVD 2d ago

   The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and…

   The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.8.6 This is due to the MCP module's OAuth 2.1 Dynamic Client…

   CVSS 7.5 CVE-2026-110732 Tigroumeow Web platform
4. 14
   CVE NVD 24h ago

   The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…

   The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API in all versions up to, and including, 7.2.0 This makes…

   CVSS 4.3 CVE-2025-11455 Tigroumeow Web platform
5. 14
   CVE NVD 38h ago

   The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute) in all versions up…

   The Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment Alt Text (aria-label attribute) in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output…

   CVSS 6.4 CVE-2026-9239 Tigroumeow Web platform
6. 14
   CVE NVD 38h ago

   The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 This is due to the plugin not…

   The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes…

   CVSS 6.5 CVE-2026-13747 Tigroumeow Web platform
7. 10
   CVE NVD 4d ago

   The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient…

   The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the upload_file function in all versions up to, and…

   CVSS 4.2 CVE-2026-107745 Tigroumeow Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Tigroumeow&limit=100. RSS for this section: feed.xml.