photo_engine_media_organizer_lightroom vulnerabilities

CVEs whose affected-version data names the photo_engine_media_organizer_lightroom package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107770Medium· 6.8

yesterday

Photo Engine (Media Organizer & Lightroom) <= 6.5.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion and Upload via /?wplr-sync-api 'delete' / 'sync' action

The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform a…

▾ Sunlittigroumeow · Photo Engine (Media Organizer & Lightroom)EPSS 0.46%via CVEORG