VendorsTinyWebGalleryadvanced_iframeall versions
Vulnerabilities

TinyWebGallery Advanced iFrame

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2023-51690
WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-01 · Modified
6.5EPSS 0.003
CVE-2024-24870
WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-05 · Modified
6.5EPSS 0.003
CVE-2023-4775
Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-11-13 · Modified
6.4EPSS 0.006
CVE-2023-7069
Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-02-01 · Modified
6.4EPSS 0.003
CVE-2025-1437
Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2025-03-26 · Modified
6.4EPSS 0.003
CVE-2025-1439
Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
Published 2025-03-26 · Analyzed
6.4EPSS 0.002
CVE-2021-24953
Advanced iFrame < 2022 - Reflected Cross-Site Scripting
Published 2022-03-07 · Modified
6.1EPSS 0.008
CVE-2024-1341
Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-02-29 · Modified
5.4EPSS 0.003
CVE-2025-1440
Advanced iFrame <= 2024.5 - Unauthenticated Settings Update
Published 2025-03-26 · Analyzed
5.3EPSS 0.003