CVE-2026-39510: Wp Chill Image Photo Gallery Final Tiles Grid

Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.11.

Affected products

• Wp Chill Image Photo Gallery Final Tiles Grid: up to and including 3.6.11

Published 2026-04-08. Last modified 2026-07-24.