Advisories · Technology
wpchill Image Photo Gallery Final Tiles Grid.
Every CVE that names wpchill Image Photo Gallery Final Tiles Grid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute
- wpchill Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management
- wpchill Image Photo Gallery Final Tiles Grid
- Broken access control
- CVSS 6.4 Medium
Image Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting
- wpchill Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Image Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery Management
- wpchill Image Photo Gallery Final Tiles Grid
- Broken access control
- CVSS 6.4 Medium
Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- wpchill Image Photo Gallery Final Tiles Grid
- Cross-site scripting (XSS)