Skip to contentFooplugins Foogallery vulnerabilities
- fooplugins gallery : foogalleryGallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode AttributeCVE-2026-854146.4 Medium
- fooplugins photo gallery by foogallery : responsive image gallery, masonry gallery & carouselPhoto Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode ParameterCVE-2026-91346.4 Medium
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-133626.1 Medium
- fooplugins foogalleryWordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerabilityCVE-2026-253634.3 Medium
- fooplugins foogalleryWordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-253625.9 Medium
- fooplugins gallery by foogalleryGallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata ExposureCVE-2025-155244.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2025-60686.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page UpdatesCVE-2024-121144.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title SizeCVE-2024-121196.4 Medium
- fooplugins foogallery, https://fooplugins.com foogallery premium +1 moreBest WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory TraversalCVE-2023-69477.7 High
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URLCVE-2024-21226.4 Medium
- fooplugins foogallery, unknown foogallery-premium +1 moreFooGallery < 2.4.15 - Author+ Stored XSSCVE-2024-27625.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-20816.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment FieldsCVE-2024-24716.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreBest WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settingsCVE-2024-06044.4 Medium
- fooplugins foogallery, https://fooplugins.com foogallery premium, fooplugins gallery by foogallery +2 moreFooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-67476.4 Medium
- fooplugins best wordpress gallery plugin – foogallery, foogallery +1 moreWordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-442335.4 Medium
- fooplugins foogalleryWordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)CVE-2023-442447.1 High
- fooplugins foogalleryWordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)CVE-2023-29439Public exploit7.1 High
- fooplugins best image gallery & responsive photo gallery – foogallery, foogallery +1 moreFooGallery < 2.0.35 - Authenticated Stored Cross-Site ScriptingCVE-2021-243575.4 Medium
- fooplugins foogalleryThe FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.CVE-2019-201824.8 Medium