Known vulnerabilities in Photo Engine (Media Organizer & Lightroom)

Organize your photos in folders and collections. Synchronize with Lightroom. Make your life easier! :)

5Reported vulnerabilities

8.8Highest CVSS score

6.5.5Latest version

2,000+Active installs

What to do now

Update Photo Engine (Media Organizer & Lightroom) to 6.5.0 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-32524	High 8.8	0.3%	6.4.9 and earlier	`6.5.0`	March 20, 2026
CVE-2024-39660	Medium 6.4	0.3%	6.3.1 and earlier	`6.3.2`	August 1, 2024
CVE-2023-38513	Medium 5.4	0.4%	6.2.5 and earlier	`6.2.6`	July 20, 2023
CVE-2024-43332	Medium 4.3	0.5%	6.4.0 and earlier	`6.4.1`	August 16, 2024
CVE-2025-54672	Medium 4.3	0.1%	6.4.3 and earlier	`6.4.4`	July 30, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.