Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Meowapps

First CVE: Feb 1, 2018Active for: 8 yearsTotal CVEs: 25
44.3
VTI Score
High

Meowapps maintains a focused portfolio of utility and media-processing applications, including AI and photo-enhancement tools, database cleaners, and file-renaming utilities that serve a consumer and small-business user base. Despite a narrow product scope, the vendor's disclosures span a meaningful volume and cluster around input-handling and data-exposure weakness classes: cross-site scripting, unrestricted file uploads, SQL injection, and sensitive-information leakage appear consistently across the product line, reflecting the challenge of securing web-facing and file-processing interfaces in consumer software. A moderate tendency toward public exploit availability characterizes this vendor's exposure, typical of application-layer vulnerabilities where tooling and proof-of-concept code propagate readily. Defenders should treat this vendor's product stack as modestly represented in vulnerability inventories but should prioritize patching where these tools are deployed in multi-user or internet-accessible environments, as input-validation and access-control weaknesses in utility software often serve as stepping stones to lateral movement or data access. Live severity, exploitation, and product-exposure counts are shown alongside this summary.

FAUCET AI Generated
25
Total CVEs
More Total CVEs than 97% of tracked vendors
0.4
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 4% of tracked vendors
6.8
Avg CVSS Score
Higher Avg CVSS Score than 48% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Meowapps over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 1, 2018
8 years ago
Most Recent CVE
Jun 15, 2026
39 days ago

Products(8 total)

Top CVEs

Signals from CVEs in this vendor scope (25 CVEs).

25 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-51409CRITICAL
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
Apr 12, 20249.876NOYES
CVE-2023-44982HIGH
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Perfect Images (Manage Image Sizes, Thumbnails, Replace, Retina).This issue affects Perfect I
Dec 19, 20237.532NOYES
CVE-2025-5071HIGH
The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Meow_MWAI_Labs_MCP::can_access_mcp'
Jun 19, 20258.826NONO
CVE-2026-27407HIGH
Editor Privilege Escalation in AI Engine <= 3.4.9 versions.
Jun 15, 20267.225NONO
CVE-2021-24465HIGH
The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before u
Oct 4, 20218.125NONO
CVE-2025-6238HIGH
The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the 'redirect_uri' parameter is missing vali
Jul 4, 20258.023NONO
CVE-2024-43332HIGH
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a thr
Nov 1, 20248.823NONO
CVE-2024-6451HIGH
AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logs_path",
Aug 19, 20247.222NONO
CVE-2024-10499HIGH
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perfor
Dec 12, 20247.221NONO
CVE-2023-51508HIGH
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Database Cleaner: Clean, Optimize & Repair.This issue affects Database Cleaner: Clean, Optimi
Jan 8, 20247.521NONO
View all 25 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products25 CVEs
40%
56%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network25 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low25 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None18 (72.0%)
Unknown0 (0.0%)
Required7 (28.0%)
Privileges Required
Low7 (28.0%)
High10 (40.0%)
None8 (32.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (25 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
8.0% of CVEs· 96th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Meowapps.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Meowapps — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Meowapps's Products

View all 5 CNAs →

Top CWEs