Medium · 4.3 CVE-2026-27424 EUVD-2026-31095GHSA-6vcv-q8rq-gc32

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Published May 20, 2026 · Updated May 20, 2026 · Assigned by Patchstack

Vendor: WP Chill Product: Image Photo Gallery Final Tiles Grid

Description

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11.

Affected products

Vendor	Product	Affected	Fixed
WP Chill	Image Photo Gallery Final Tiles Grid	≤ 3.6.11	—

References

https://patchstack.com/database/wordpress/plugin/final-tiles-grid-gallery-lite/vulnerability/wordpress-image-photo-gallery-final-tiles-grid-plugin-3-6-11-broken-access-control-vulnerability?_s_id=cve vdb-entry