PatchTheCVEtinywebgallery vulnerabilities
Recent CVEs affecting tinywebgallery products. 5 tracked.
tinywebgallery has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-12-18. Highest priority: CVE-2023-53922 (score 64/100).
- CVE-2025-1440 MEDIUM 5.3 UPGRADE The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the ai
- CVE-2025-1439 MEDIUM 6.4 UPGRADE The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanc
- CVE-2025-1437 MEDIUM 6.4 UPGRADE The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanc
- CVE-2023-53939 MEDIUM 5.4 DOWNGRADE TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers t
- CVE-2023-53922 CRITICAL 9.8 DOWNGRADE TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allo
FAQ
How do I fix tinywebgallery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tinywebgallery being exploited right now?
None of the tracked tinywebgallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tinywebgallery CVE should I patch first?
CVE-2023-53922 currently ranks highest (64/100): TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allo.