Unknown Image Photo Gallery Final Tiles Grid vulnerabilities

4 CVEs affecting Unknown Image Photo Gallery Final Tiles Grid, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107178, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-107178, published 2026-10-14. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the…
CVE-2026-104644, published 2026-10-14. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline script on every page that embeds…
CVE-2026-104646, published 2026-10-08. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing…
CVE-2026-104645, published 2026-10-08. Low severity, CVSS 2.7. EPSS: 0.2% chance of exploitation in the next 30 days. The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a…