Vulnerabilities and security researches forwplr-sync wplr-sync

Jun 07, 2024

CVE, Research URL: CVE-2023-38513
Home page URL: Security reports for Photo Engine (Media Organizer & Lightroom)
Application: Photo Engine (Media Organizer & Lightroom)
Date: Dec 20, 2023
Research Description: Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine (Media Organizer & Lightroom).This issue affects Photo Engine (Media Organizer & Lightroom): from n/a through 6.2.5.
Affected versions: Min -, max -.
Status: vulnerable

Aug 02, 2024

CVE, Research URL: CVE-2024-39660
Home page URL: Security reports for Photo Engine (Media Organizer & Lightroom)
Application: Photo Engine (Media Organizer & Lightroom)
Date: Aug 02, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1.
Affected versions: Min -, max -.
Status: vulnerable

Aug 20, 2024

CVE, Research URL: CVE-2024-43332
Home page URL: Security reports for Photo Engine (Media Organizer & Lightroom)
Application: Photo Engine (Media Organizer & Lightroom)
Date: Nov 01, 2024
Research Description: Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
Affected versions: Min -, max -.
Status: vulnerable

Aug 01, 2025

CVE, Research URL: CVE-2025-54672
Home page URL: Security reports for Photo Engine (Media Organizer & Lightroom)
Application: Photo Engine (Media Organizer & Lightroom)
Date: -
Research Description: Photo Engine (Media Organizer & Lightroom) [wplr-sync] < 6.4.4 CVE-2025-54672
Affected versions: Min -, max -.
Status: vulnerable