Code Injection Risk in Meow Gallery WordPress Plugin
CVE-2026-92422
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 20 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-92422?
The Meow Gallery WordPress plugin prior to version 5.5.5 is susceptible to improper input sanitization. An unauthenticated attacker can inject malicious payloads into shortcodes via user-supplied values. This allows them to execute arbitrary shortcodes and potentially expose sensitive gallery content through publicly accessible endpoints. Ensuring proper input validation and sanitization can mitigate this risk and protect users from unauthorized disclosures.
Affected Version(s)
Meow Gallery 0 < 5.5.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.