Skip to contentWp Chill Image Photo Gallery Final Tiles Grid vulnerabilities
- unknown image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' ParameterCVE-2026-1071786.8 Medium
- unknown image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration UpdateCVE-2026-1046446.8 Medium
- unknown image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode AttributesCVE-2026-1046466.8 Medium
- unknown image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDORCVE-2026-1046452.7 Low
- wp chill image photo gallery final tiles gridWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1044096.5 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode AttributeCVE-2026-45596.4 Medium
- wp chill image photo gallery final tiles gridWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerabilityCVE-2026-274244.3 Medium
- wp chill image photo gallery final tiles gridWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-395102.7 Low
- wp chill image photo gallery final tiles gridWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerabilityCVE-2026-253754.3 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery ManagementCVE-2025-154665.4 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' SettingCVE-2025-136936.4 Medium
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery ManagementCVE-2025-144555.4 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-62616.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSSCVE-2024-37106.8 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site ScriptingCVE-2022-01865.4 Medium