Advisories · Technology

Image Photo Gallery Final Tiles Grid.

Every CVE that names Image Photo Gallery Final Tiles Grid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107178 CVE record

CVSS 6.8 Medium

Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter
- Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2026
CVE-2026-104644 CVE record

CVSS 6.8 Medium

Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration Update
- Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2026
CVE-2026-104646 CVE record

CVSS 6.8 Medium

Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes
- Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2026
CVE-2026-104645 CVE record

CVSS 2.7 Low

Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR
- Image Photo Gallery Final Tiles Grid
- Broken access control
Not analysed yet 8 Oct 2026
CVE-2024-3710 CVE record

CVSS 6.8 Medium

Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS
- Image Photo Gallery Final Tiles Grid
Not analysed yet 13 Jul 2024
CVE-2022-0186 CVE record

Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting
- Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2022