Advisories · Technology

WP Chill Image Photo Gallery Final Tiles Grid.

Every CVE that names WP Chill Image Photo Gallery Final Tiles Grid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104409 CVE record

CVSS 6.5 Medium

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
- WP Chill Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2026
CVE-2026-27424 CVE record

CVSS 4.3 Medium

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability
- WP Chill Image Photo Gallery Final Tiles Grid
- Broken access control
Not analysed yet 20 May 2026
CVE-2026-39510 CVE record

CVSS 2.7 Low

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability
- WP Chill Image Photo Gallery Final Tiles Grid
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2026-25375 CVE record

CVSS 4.3 Medium

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability
- WP Chill Image Photo Gallery Final Tiles Grid
- Broken access control
Not analysed yet 19 Feb 2026