Tinywebgallery vulnerabilities

Products

• Tinywebgallery 13
• Advanced Iframe 9

Newest

• tinywebgallery TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name Parameter CVE-2023-53939 5.1 MediumDecember 18, 2025
• tinywebgallery TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload CVE-2023-53922 9.3 CriticalDecember 17, 2025
• mdempfle advanced iframe Advanced iFrame <= 2024.5 - Unauthenticated Settings Update CVE-2025-1440 5.3 MediumMarch 26, 2025
• mdempfle advanced iframe Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header CVE-2025-1439 6.4 MediumMarch 26, 2025
• mdempfle advanced iframe Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1437 6.4 MediumMarch 26, 2025
• mdempfle advanced iframe Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1341 4.9 MediumFebruary 29, 2024
• mdempfle advanced iframe WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24870 6.5 MediumFebruary 5, 2024
• advanced iframe iframe, mdempfle advanced iframe +1 more WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51690 6.5 MediumFebruary 1, 2024
• mdempfle advanced iframe Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-7069 6.4 MediumFebruary 1, 2024
• mdempfle advanced iframe Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4775 6.4 MediumNovember 13, 2023
• mdempfle advanced iframe Advanced iFrame < 2022 - Reflected Cross-Site Scripting CVE-2021-24953 6.1 MediumMarch 7, 2022
• tinywebgallery TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows... CVE-2013-2631 5.3 MediumFebruary 3, 2020
• tinywebgallery PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin... CVE-2012-2931 7.2 HighJanuary 9, 2020
• tinywebgallery wordpress flash uploader The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute... CVE-2014-5014 9.8 CriticalApril 25, 2018
• tinywebgallery In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item`... CVE-2017-16635 5.4 MediumNovember 6, 2017
• tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow... CVE-2012-2932 4.3 MediumApril 24, 2015
• tinywebgallery Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8... CVE-2012-2930 6.8 MediumApril 24, 2015
• tinywebgallery TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters... CVE-2012-5347 Public exploit 7.5 HighOctober 9, 2012
• tinywebgallery TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct... CVE-2011-3810 5.0 MediumSeptember 24, 2011
• claudio klingler quixplorer, tinywebgallery +1 more Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in... CVE-2009-1911 Public exploit 6.8 MediumJune 4, 2009
• tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote... CVE-2007-4958 4.3 MediumSeptember 18, 2007
• tinywebgallery PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers... CVE-2006-4166 Public exploit 7.5 HighAugust 16, 2006
• tinywebgallery Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote... CVE-2006-1802 Public exploit 4.3 MediumApril 18, 2006