Lucene search
+L

62 matches found

NVD
NVD
•added 2026/10/05 9:17 a.m.•11 views

CVE-2026-104409

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13...

6.5CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 8:06 a.m.•11 views

CVE-2026-104409

The WP Chill Image Photo Gallery Final Tiles Grid plugin (specifically the final-tiles-grid-gallery-lite component) is vulnerable to Stored Cross-Site Scripting (XSS) in versions 3.6.13 and below . The root cause is the improper neutralization of input during web page generation . Exploitation de...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 8:06 a.m.•38 views

CVE-2026-104409 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13...

6.5CVSS0.00161EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 8:06 a.m.•8 views

EUVD-2026-92284

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/05 8:05 a.m.•9 views

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.13...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/08/22 2:16 p.m.•14 views

CVE-2026-4559

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, 3.6.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

6.4CVSS0.00331EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/22 1:27 p.m.•12 views

CVE-2026-4559 Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, 3.6.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/22 1:27 p.m.•33 views

CVE-2026-4559

The Image Photo Gallery Final Tiles Grid plugin for WordPress (all versions up to and including 3.6.12 ) is vulnerable to Stored Cross-Site Scripting via the delay shortcode attribute. The root cause is insufficient input sanitization and output escaping, allowing authenticated attackers with Con...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/22 1:27 p.m.•16 views

EUVD-2026-64297

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, 3.6.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

6.4CVSS5.7AI score0.00331EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/22 12:00 a.m.•22 views

PT-2026-79551

Name of the Vulnerable Software and Affected Versions Image Photo Gallery Final Tiles Grid versions prior to 3.6.13 Description Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site Scripting. This is...

6.4CVSS6.1AI score0.00331EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/22 12:00 a.m.•4 views

CVE-2026-4559: Improper Neutralization of Input During Web Page Generation

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, 3.6.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

6.4CVSS6AI score0.00331EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/20 12:13 p.m.•20 views

CVE-2026-27424

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/20 12:13 p.m.•51 views

CVE-2026-27424 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/20 12:13 p.m.•14 views

CVE-2026-27424 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS6AI score0.0027EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/20 12:13 p.m.•40 views

EUVD-2026-31095

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•4 views

CVE-2026-27424: Missing Authorization

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.9AI score0.0027EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/20 12:00 a.m.•27 views

wordpress plugin Image Photo Gallery Final Tiles Grid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. WordPress plugins are additional applications that can b...

4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•18 views

WordPress plugin Image Photo Gallery Final Tiles Grid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. WordPress plugins are additional applications that can b...

2.7CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-39510: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.11...

2.7CVSS5.9AI score0.0028EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/19 8:27 a.m.•25 views

CVE-2026-25375

CVE-2026-25375 concerns the WordPress plugin Image Photo Gallery Final Tiles Grid (final-tiles-grid-gallery-lite) with version

4.3CVSS6AI score0.00249EPSS
SaveExploits0References1
Rows per page
Query Builder