Improper Capability Check in Meow Gallery WordPress Plugin
CVE-2026-92423
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 20 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-92423?
The Meow Gallery plugin for WordPress prior to version 5.5.5 lacks sufficient checks on user capabilities, allowing authenticated users with Author-level access or higher to view sensitive information. This includes titles, authors, dates, and statuses of other users' draft and private posts, potentially leading to unauthorized data exposure.
Affected Version(s)
Meow Gallery 0 < 5.5.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.