Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Image Photo Gallery Final Tiles Grid 3.6.14 Clear all filters
TI-2026-69501 CVE-2026-104646

Stored XSS in Image Photo Gallery Final Tiles Grid via gallery shortcode

Priority LOW 32

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline scri…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00282 Published 2026-10-08 Fixed in 3.6.14 CWE-79
TI-2026-69500 CVE-2026-104645

Missing authorization checks in Image Photo Gallery Final Tiles Grid

Priority LOW 13

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than th…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00205 Published 2026-10-08 Fixed in 3.6.14 CWE-639