Easy Image Collage
Easy Image Collage has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Easy Image Collage has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Easy Image Collage is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-9019Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters
Read the full analysisVulnerability Records

Easy Image Collage
Author
Brecht
Use Easy Image Collage to easily add responsive image collages to your posts, pages or any custom post type. Similar to apps like Diptic, Pic Jointer and Instagram Layouts. Go to our website for documentation and video lessons on all our features. An overview of the Easy Image Collage features: Compatible with both the Classic Editor and new Gutenberg editor Multiple responsive layouts for your collages Optionally switch to regular images on mobile Easily change the size of the layouts Intuitive drag and drop interface Add multiple collages to any post type Open images in a lightbox of your choice Display Pinterest button for sharing your images Uses actual images for optimal SEO We also have a Easy Image Collage Premium version which offers the following features: Add captions to the images in the collage Set custom links for your images Unlimited possibilities by creating your own layout Adjust borders to get layouts however you want Use image manipulation to get them just right Apply Instagram-like filters to your images Add text frames to your collages Show the image sizes for pixel perfect collages
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C