Tinymce Thumbnail Gallery

Tinymce Thumbnail Gallery has one disclosed vulnerability in the WordSec catalog, all reported in 2014; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).

The one issue recorded for Tinymce Thumbnail Gallery has a vendor fix available, so running the current release closes it.

All of these findings were reported by Sammy Forgit. Tinymce Thumbnail Gallery is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.0.5.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Tinymce Thumbnail Gallery vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5

Tinymce Thumbnail Gallery <= 1.0.7 - Local File Inclusion

Read the full analysis

Vulnerability Records

1 records


2014-08-01 00:00	Tinymce Thumbnail Gallery <= 1.0.7 - Local File Inclusion Tinymce Thumbnail Gallery <= 1.0.7	`N/A`	7.5 High	Sammy Forgit	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestvv1.1.0

Tinymce Thumbnail Gallery

Author

James Charlesworth

0.0(0)

0/100

Last Updated

2012-06-12 (15y ago)

Active Installs

70+

Downloads

23,121

Requires WP

2.0.2+

Requires PHP

Tested up to

WP 3.0.5

Created

2010-10-15 (16y ago)

This plugin is a very simple image gallery that is built into Tinymce (it’s a Tinymce plugin I created). My goals was to create a plugin that required no coding skills and would display thumbnails evenly regardless of image size/proportions (default is 100/80, but you can make the thumbnails anysize you want). CSS is used to hide portions of the image outside of the thumbnail size you choose. When you hover over the image, the entire image is shown. Built by an Atlanta SEO.

View on WordPress.org