Medium · 5.4 CVE-2023-38513 EUVD-2023-42313GHSA-qf25-72qj-2prr

WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jordy Meow Product: Photo Engine (Media Organizer & Lightroom)

Description

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine (Media Organizer & Lightroom).This issue affects Photo Engine (Media Organizer & Lightroom): from n/a through 6.2.5.

Affected products

Vendor	Product	Affected	Fixed
Jordy Meow	Photo Engine (Media Organizer & Lightroom)	≤ 6.2.5	—

References

https://patchstack.com/database/vulnerability/wplr-sync/wordpress-photo-engine-plugin-6-2-5-insecure-direct-object-references-idor?_s_id=cve vdb-entry