Known vulnerabilities in Meow Gallery

Tired of slow, bloated gallery plugins? Here is the answer! ☺️ Polished, beautiful galleries that are blazing fast. No bloat. Enjoy! 💕

7Reported vulnerabilities

8.8Highest CVSS score

5.5.3Latest version

10,000+Active installs

What to do now

Update Meow Gallery to 5.5.2 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2021-24465	High 8.1	1.2%	Before 4.1.9	`4.1.9`	October 4, 2021
WF-67ae29ee-ec3d-41d2-8691-ba1c615d243d	High 8.8	—	4.1.9 and earlier	`4.2.0`	September 2, 2021
CVE-2026-32418	Medium 6.5	0.3%	5.4.4 and earlier	`5.4.5`	February 26, 2026
CVE-2025-47449	Medium 6.4	0.3%	5.2.7 and earlier	`5.2.8`	May 7, 2025
CVE-2024-4386	Medium 6.4	0.4%	0 to 5.1.3 (inclusive)	`5.1.4`	May 14, 2024
CVE-2026-15386	Medium 6.4	0.1%	5.5.1 and earlier	`5.5.2`	August 3, 2026
CVE-2026-1291	Medium 4.3	0.2%	0 to 5.4.4 (inclusive)	`5.4.5`	June 13, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.