CVE-2026-104646 | Image Photo Gallery Final Tiles Grid Plugin up to 3.6.13 on WordPress Shortcode cross site scripting

October 8, 2026 Yanac

A vulnerability marked as problematic has been reported in Image Photo Gallery Final Tiles Grid Plugin up to 3.6.13 on WordPress. The impacted element is an unknown function of the component Shortcode Handler. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-104646. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More