CVE-2015-9432: Thealpinepress Alpine-Photo-Tile-For-Instagram

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter.

Affected products

• Thealpinepress Alpine-Photo-Tile-For-Instagram: before 1.2.7.6 (fixed in 1.2.7.6)

Published 2019-09-26. Last modified 2026-06-17.