Skip to contentFooplugins Gallery By Foogallery vulnerabilities
- fooplugins photo gallery by foogallery : responsive image gallery, masonry gallery & carouselPhoto Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode ParameterCVE-2026-91346.4 Medium
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-133626.1 Medium
- fooplugins gallery by foogalleryGallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata ExposureCVE-2025-155244.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2025-60686.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page UpdatesCVE-2024-121144.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title SizeCVE-2024-121196.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URLCVE-2024-21226.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-20816.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment FieldsCVE-2024-24716.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreBest WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settingsCVE-2024-06044.4 Medium
- fooplugins foogallery, https://fooplugins.com foogallery premium, fooplugins gallery by foogallery +2 moreFooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-67476.4 Medium