Photo Engine vulnerabilities | LiveThreat CVE Feed

Product

Photo Engine

by Jordy Meow · last CVE Mar 25, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Photo Engine to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-32524	9.1	0%	Mar 25	WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability Affected: through <= 6.4.9
CVE-2024-43332	8.8	1%	Nov 1	WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability Affected: through 6.4.0
CVE-2024-39660	5.9	0%	Aug 1	WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability Affected: through 6.3.1
CVE-2025-54672	4.3	0%	Aug 14	WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross Site Request Forgery (CSRF) Vulnerability Affected: through 6.4.3