Fooplugins vulnerabilities

Products

• Foogallery 17
• Gallery By Foogallery 11
• Lightbox & Modal Popup Wordpress Plugin – Foobox 4
• Foobox 2
• Notification Bar, Announcement And Cookie Notice Wordpress Plugin – Foobar 2

Newest

• fooplugins gallery : foogallery Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute CVE-2026-85414 6.4 MediumSeptember 5, 2026
• fooplugins photo gallery by foogallery : responsive image gallery, masonry gallery & carousel Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter CVE-2026-9134 6.4 MediumJune 13, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• fooplugins foogallery WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerability CVE-2026-25363 4.3 MediumFebruary 19, 2026
• fooplugins foogallery WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability CVE-2026-25362 5.9 MediumFebruary 19, 2026
• fooplugins gallery by foogallery Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure CVE-2025-15524 4.3 MediumFebruary 11, 2026
• fooplugins foogallery, gallery by foogallery +1 more FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2025-6068 6.4 MediumJuly 11, 2025
• fooplugins foobox, lightbox & modal popup wordpress plugin – foobox +1 more Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2025-5537 6.4 MediumJuly 8, 2025
• bradvin foobox image lightbox WordPress Lightbox & Modal Popup WordPress Plugin – FooBox plugin <= 2.7.33 - Cross Site Scripting (XSS) vulnerability CVE-2025-32139 5.9 MediumApril 10, 2025
• fooplugins foogallery, gallery by foogallery +1 more FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates CVE-2024-12114 4.3 MediumMarch 8, 2025
• fooplugins foogallery, gallery by foogallery +1 more FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size CVE-2024-12119 6.4 MediumMarch 8, 2025
• fooplugins foogallery, https://fooplugins.com foogallery premium +1 more Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal CVE-2023-6947 7.7 HighDecember 10, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• fooplugins lightbox & modal popup wordpress plugin – foobox, themergency foobox +1 more Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes CVE-2024-5668 6.4 MediumAugust 8, 2024
• fooplugins foobox, foobox-image-lightbox-premium, unknown lightbox & modal popup wordpress plugin +1 more +3 more FooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSS CVE-2024-3276 4.8 MediumJune 18, 2024
• fooplugins foogallery, gallery by foogallery +1 more FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL CVE-2024-2122 6.4 MediumJune 14, 2024
• fooplugins foogallery, unknown foogallery-premium +1 more FooGallery < 2.4.15 - Author+ Stored XSS CVE-2024-2762 5.4 MediumJune 13, 2024
• fooplugins foogallery, gallery by foogallery +1 more FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-2081 6.4 MediumApril 9, 2024
• fooplugins foogallery, gallery by foogallery +1 more FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields CVE-2024-2471 6.4 MediumApril 6, 2024
• fooplugins foogallery, gallery by foogallery +1 more Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings CVE-2024-0604 4.4 MediumFebruary 20, 2024
• fooplugins foogallery, https://fooplugins.com foogallery premium, fooplugins gallery by foogallery +2 more FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6747 6.4 MediumJanuary 3, 2024
• fooplugins best wordpress gallery plugin – foogallery, foogallery +1 more WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-44233 5.4 MediumOctober 6, 2023
• fooplugins foogallery WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS) CVE-2023-44244 7.1 HighOctober 2, 2023
• fooplugins foogallery WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS) CVE-2023-29439 Public exploit 7.1 HighMay 16, 2023
• fooplugins best image gallery & responsive photo gallery – foogallery, foogallery +1 more FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting CVE-2021-24357 5.4 MediumJune 14, 2021
• fooplugins foogallery The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter. CVE-2019-20182 4.8 MediumJanuary 9, 2020