Skip to content
OpenAdvisories
Low · 2.7 CVE-2026-39510 EUVD-2026-20177GHSA-3677-p5q3-vx7h

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.11.

Affected products

VendorProductAffectedFixed
WP Chill Image Photo Gallery Final Tiles Grid ≤ 3.6.11 —

References