VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Image Photo Gallery Final Tiles Grid security & vulnerabilities

final-tiles-grid-gallery-lite— active installsLast vulnerability Oct 14, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin
18Known vulnerabilities
  • Critical0
  • High1
  • Medium17
  • Low0
Vulnerabilities per year
2019: 1 vulnerability1192020: 1 vulnerability1202022: 2 vulnerabilities2222024: 1 vulnerability1242025: 3 vulnerabilities3252026: 10 vulnerabilities1026

All Image Photo Gallery Final Tiles Grid vulnerabilities

Image Photo Gallery Final Tiles Grid vulnerabilities
SeverityVulnerabilityCVEPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
<3.6.15Update to 3.6.15
CVE-2026-104644
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
<3.6.16Update to 3.6.16
CVE-2026-107178
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
<3.6.14Update to 3.6.14
CVE-2026-104645
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.6.13Update to 3.6.14
CVE-2026-104646
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.6.13Update to 3.6.14
CVE-2026-104409
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute
≤3.6.12Update to 3.6.13
CVE-2026-4559
Medium4.3Missing Authorization
≤3.6.11Update to 3.6.12
CVE-2026-27424
Medium4.3Missing Authorization
≤3.6.10Update to 3.6.11
CVE-2026-25375
Medium4.3Authenticated (Author+) Insecure Direct Object Reference
≤3.6.11Update to 3.6.12
CVE-2026-39510
Medium5.4Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management
≤3.6.9Update to 3.6.10
CVE-2025-15466
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting
≤3.6.8Update to 3.6.9
CVE-2025-13693
Medium5.4Missing Authorization to Authenticated (Contributor+) Gallery Management
≤3.6.7Update to 3.6.8
CVE-2025-14455
Medium6.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
≤3.6.0Update to 3.6.1
CVE-2024-6261
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.5.8Update to 3.6.0
CVE-2024-3710
Medium6.3Missing Authorization Checks
all versionsNo patch available
CVE-2022-4974
Medium5.4Contributor+ Stored Cross-Site Scripting
≤3.5.2Update to 3.5.3
CVE-2022-0186
Medium6.4Authenticated Stored Cross-Site Scripting
≤3.4.18Update to 3.4.19
CVE-2020-14962
High8.8Missing Authorization to Arbitrary Options Update
<3.1.7Update to 3.1.7
—

Image Photo Gallery Final Tiles Grid: common questions

Does Image Photo Gallery Final Tiles Grid have known vulnerabilities?

Yes. VulnCrest Radar lists 18 known vulnerabilities in Image Photo Gallery Final Tiles Grid: 1 high, 17 medium. At least one is not fixed in the latest version.

How do I check which version of Image Photo Gallery Final Tiles Grid I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Image Photo Gallery Final Tiles Grid vulnerability?

CVE-2026-104644, published Oct 14, 2026: Image Photo Gallery Final Tiles Grid < 3.6.15 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).

Is any Image Photo Gallery Final Tiles Grid vulnerability listed in CISA KEV?

No. None of the known Image Photo Gallery Final Tiles Grid vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?