Authorization Bypass in Meow Gallery Plugin for WordPress

CVE-2026-13747

What is CVE-2026-13747?

The Meow Gallery plugin for WordPress is vulnerable to an authorization bypass due to inadequate checks, allowing authenticated attackers with author-level access or higher to access sensitive metadata from private and draft posts. This vulnerability enables attackers to enumerate critical details such as post ID, title, date, author, and status, posing a significant risk to user privacy and content security across WordPress sites utilizing this plugin. Appropriate measures should be taken to secure affected versions.

References