low2.7
CVE-2026-92423
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returni…
Impact
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other users' draft and private posts.
Affected products
| Product | Affected versions |
|---|---|
| Meow Gallery WordPress Plugin | before 5.5.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.