CVE-2026-92422— Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route
Quick assessment
Affected
Unknown Meow Gallery
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Meow Gallery WordPress 插件 5.5.5 版本之前，在将用户提供的值拼接到传递给 WordPress shortcode 解析器的 shortcode 字符串时，未对其进行适当的净化处理。该插件在公开可访问的端点执行此操作，这使得未认证的用户能够执行任意已注册的 shortcode，从而泄露非公开的图库内容。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92422
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route
Source: CVE Program / CVE List V5
Vulnerability Description
The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered shortcodes and disclose non-public gallery content.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | Meow Gallery | 0 ~ 5.5.5 | - |
|
II. Public POCs for CVE-2026-92422
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92422
请登录查看更多情报信息。
Other References for CVE-2026-92422 (1)
-
🔗 Meow Gallery < 5.5.5 – Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route | CVE 2026-92422 | Plugin Vulnerabilities exploit vdb-entry technical-description
Same Patch Batch · Unknown · 2026-09-20 · 20 CVEs total
| CVE-2026-84223 | Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload | |
| CVE-2026-14844 | Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes | |
| CVE-2026-16542 | Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar | |
| CVE-2026-81650 | NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import | |
| CVE-2026-81652 | NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR | |
| CVE-2026-81653 | NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR | |
| CVE-2026-81654 | NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update | |
| CVE-2026-81651 | NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR | |
| CVE-2026-87068 | Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import | |
| CVE-2026-87067 | Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection | |
| CVE-2026-92540 | Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Admini | |
| CVE-2026-85017 | Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection | |
| CVE-2026-82842 | SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching | |
| CVE-2026-87840 | Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering | |
| CVE-2026-87839 | Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion | |
| CVE-2026-92410 | Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF | |
| CVE-2026-92423 | Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts | |
| CVE-2026-92965 | TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption | |
| CVE-2026-92541 | Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Admini |
IV. Related Vulnerabilities
Same product: Meow Gallery
-
CVE-2026-92423
Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclo -
CVE-2026-15386
Meow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt -
CVE-2026-1291
Meow Gallery <= 5.4.4 - Missing Authorization to Authenticat -
CVE-2026-32418
WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulne -
CVE-2025-47449
WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scriptin
Same vendor: Unknown
-
CVE-2026-92540
Import and export users and customers < 2.5.2 - Custom Role -
CVE-2026-92541
Import and export users and customers < 2.5.2 - Custom Role -
CVE-2026-92965
TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption -
CVE-2026-92423
Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclo -
CVE-2026-92410
Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF
V. Comments for CVE-2026-92422
No comments yet