Advanced Iframe (Tinywebgallery) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 126 known versions, newest CVE from 2025-03-26. Vendor: Tinywebgallery.

CVEs of Advanced Iframe

CVE-2025-1440 - CVSS 5.3 (medium), 2025-03-26: The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up…
CVE-2025-1439 - CVSS 6.4 (medium), 2025-03-26: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and…
CVE-2025-1437 - CVSS 6.4 (medium), 2025-03-26: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and…
CVE-2024-1341 - CVSS 5.4 (medium), 2024-02-29: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's advanced_iframe shortcode in all versions up to, and…
CVE-2024-24870 - CVSS 6.5 (medium), 2024-02-05: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Advanced iFrame allows Stored XSS.This…
CVE-2023-51690 - CVSS 6.5 (medium), 2024-02-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Advanced iFrame allows Stored XSS.This issue affects…
CVE-2023-7069 - CVSS 6.4 (medium), 2024-02-01: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and…
CVE-2023-4775 - CVSS 6.4 (medium), 2023-11-13: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advanced_iframe' shortcode in versions up to, and including,…
CVE-2021-24953 - CVSS 6.1 (medium), 2022-03-07: The Advanced iFrame WordPress plugin before 2022 does not sanitise and escape the ai_config_id parameter before outputting it back in an admin page, leading…