CVE-2026-25375
- EPSS 0.04%
- Veröffentlicht 19.02.2026 08:27:00
- Zuletzt bearbeitet 19.02.2026 20:25:38
Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n...
CVE-2025-15466
- EPSS 0.04%
- Veröffentlicht 19.01.2026 23:21:52
- Zuletzt bearbeitet 26.01.2026 15:05:39
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple AJAX actions in all versions up to, and including, 3.6.9. This makes it possible ...
CVE-2025-13693
- EPSS 0.05%
- Veröffentlicht 21.12.2025 03:20:05
- Zuletzt bearbeitet 23.12.2025 14:51:52
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom scripts' setting in all versions up to, and including, 3.6.8 due to insufficient input sanitization and output escaping. This m...
CVE-2025-14455
- EPSS 0.06%
- Veröffentlicht 19.12.2025 09:29:48
- Zuletzt bearbeitet 19.12.2025 18:00:18
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.7. This is due to the plugin not properly verifying that a user is authorized to perform actions on gallery ...
CVE-2024-3710
- EPSS 0.44%
- Veröffentlicht 13.07.2024 06:15:02
- Zuletzt bearbeitet 13.05.2025 15:06:53
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored ...