Image Photo Gallery Final Tiles Grid — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Image Photo Gallery Final Tiles Grid, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-4559	Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute CWE-79	6.4	Medium	2026-08-22
CVE-2026-27424	WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability CWE-862	4.3	Medium	2026-05-20
CVE-2026-39510	WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability CWE-639	2.7	Low	2026-04-08
CVE-2026-25375	WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability CWE-862	4.3	Medium	2026-02-19
CVE-2025-15466	Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management CWE-862	5.4	Medium	2026-01-19
CVE-2025-13693	Image Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting CWE-79	6.4	Medium	2025-12-21
CVE-2025-14455	Image Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery Management CWE-862	5.4	Medium	2025-12-19
CVE-2024-6261	Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79	6.4	Medium	2025-02-27
CVE-2024-3710	Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS	5.4^AI	Medium ^AI	2024-07-13
CVE-2022-0186	Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting CWE-79	5.4	-	2022-02-21

All 10 known CVE vulnerabilities affecting Image Photo Gallery Final Tiles Grid with full Chinese analysis, references, and POCs where available.