Image photo gallery final tiles grid

This hub aggregates every CVE we track for Image photo gallery final tiles grid, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Image photo gallery final tiles grid.

• CVE-2026-27424WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability4.3May 20, 2026
• CVE-2026-39510WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability2.7Apr 8, 2026
• CVE-2026-25375WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability4.3Feb 19, 2026
• CVE-2025-15466Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management5.4Jan 19, 2026
• CVE-2025-13693Image Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting6.4Dec 21, 2025
• CVE-2025-14455Image Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery Management5.4Dec 19, 2025
• CVE-2024-6261Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4Feb 27, 2025
• CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3Oct 16, 2024
• CVE-2024-3710Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS6.8Jul 13, 2024
• CVE-2022-0186Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting5.4Feb 21, 2022
• CVE-2020-14962Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title (aka imageTitle) or Caption (a...5.4Jun 21, 2020