Verified

CVE-2026-104645: Image Photo Gallery Final Tiles Grid 0 to before 3.6.14

Affected technology

Image Photo Gallery Final Tiles Grid · 0 to before 3.6.14
Vendor not specified by the source

Description’s affected range: before 3.6.14 does not properly verify authorization on several of its gallery and image management actions

Component: Not specified by the source

What an attacker can do

Any authenticated user with contributor-level access or above can clone, modify and reorder galleries and images belonging to other users and to write Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 metadata onto arbitrary posts they do not own.

Published 2026-10-08 08:49:49.966584+00:00

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-08 08:50:52.119177+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-08 08:49:39.219831+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-104645.html