CVE-2026-92422

MediumCVSS 6.5

Published: 20/09/2026(UTC)Updated: 21/09/2026(UTC)Translated: 20/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint. This allows unauthenticated users to execute arbitrary registered shortcodes and disclose non-public gallery content.

Risk Assessment

An unauthenticated attacker can execute arbitrary registered shortcodes, potentially leading to disclosure of non-public content or other effects depending on available shortcodes. This poses a threat to data confidentiality on the site.

Recommendation

Update the Meow Gallery plugin to version 5.5.5 or later. Until updated, consider restricting access to the plugin's public endpoints.

Other vulnerabilities in Meow Gallery WordPress plugin

CVE-2026-92423Low
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data. This allows authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other users' draft and private posts.

Original NVD description (English source)

The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered shortcodes and disclose non-public gallery content.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS