Vulnerabilidades en tigroumeow
33 resultadosCVE-2025-11749CRITICALAI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege EscalationEPSS 74.8%CVE-2025-7847HIGHAI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.3%CVE-2024-0699MEDIUMAI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_urlEPSS 1.2%CVE-2025-6784HIGHCode Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code ExecutionEPSS 0.9%CVE-2026-1400HIGHAI Engine <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata EndpointEPSS 0.7%CVE-2025-5071HIGHAI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCPEPSS 0.7%CVE-2025-7780MEDIUMAI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio FunctionsEPSS 0.6%CVE-2024-0378MEDIUMAI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2026-107770MEDIUMPhoto Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' actionEPSS 0.5%CVE-2026-89141MEDIUMAI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' ParameterEPSS 0.5%CVE-2025-12844HIGHAI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR DeserializationEPSS 0.5%CVE-2025-8084MEDIUMAI Engine <= 3.1.8 - Authenticated (Editor+) Server-Side Request ForgeryEPSS 0.5%CVE-2024-4386MEDIUMGallery Block (Meow Gallery) <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-4912MEDIUMMedia Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request ForgeryEPSS 0.4%CVE-2026-13747MEDIUMMeow Gallery <= 5.5.4 - Missing Authorization to Authenticated (Author+) Information Disclosure via fetch_posts REST EndpointEPSS 0.4%CVE-2026-109234HIGHMeow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata DesynchronizationEPSS 0.4%CVE-2025-6238HIGHAI Engine 2.8.4 - Insecure OAuth ImplementationEPSS 0.4%CVE-2025-8574HIGHDatabase Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table DeletionEPSS 0.4%CVE-2026-8719HIGHAI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer TokenEPSS 0.4%CVE-2026-96561HIGHAI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt InjectionEPSS 0.3%