Image Photo Gallery Final Tiles Grid (Unknown) - vulnerabilities (CVEs)

6 CVEs, 4 in the last 30 days, 2 known versions, newest CVE from 2026-10-14. Vendor: Unknown.

CVEs of Image Photo Gallery Final Tiles Grid

• CVE-2026-107178 - CVSS 6.8 (medium), 2026-10-14: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an…
• CVE-2026-104644 - CVSS 6.8 (medium), 2026-10-14: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an…
• CVE-2026-104646 - CVSS 6.8 (medium), 2026-10-08: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through…
• CVE-2026-104645 - CVSS 2.7 (low), 2026-10-08: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management…
• CVE-2024-3710 - CVSS 6.8 (medium), 2024-07-13: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them…
• CVE-2022-0186 - CVSS 5.4 (medium), 2022-02-21: The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing…