Vendor

    FooPlugins

    27 known vulnerabilities in products by FooPlugins, 0 of them actively exploited (CISA KEV).

    Key figures

    27

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in FooPlugins
    HighCVE-2023-29439

    WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    HighCVE-2023-6947

    Https://fooplugins.com FooGallery Premium: Path Traversal: '/../filedir'

    		7.7
    MediumCVE-2026-85414

    FooPlugins Gallery: Cross-site Scripting

    		6.4
    HighCVE-2026-120687

    FooPlugins Lightbox & Modal Popup WordPress Plugin: Cross-site Scripting

    		7.2
    MediumCVE-2024-2081

    FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2026-9134

    Cross-site Scripting (CVE-2026-9134)

    		6.4
    MediumCVE-2024-2122

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    		6.4
    MediumCVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    also in 153 other products

    		6.3
    MediumCVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    also in 74 other products

    		6.1
    HighCVE-2023-44244

    WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2019-20182

    FooPlugins FooGallery: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2021-24357

    FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting

    		5.4
    MediumCVE-2024-0604

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    		4.4
    MediumCVE-2023-6747

    FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2024-2762

    FooGallery < 2.4.15 - Author+ Stored XSS

    		6.3
    MediumCVE-2026-25362

    WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2025-6068

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    		6.4
    MediumCVE-2024-2471

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    		6.4
    MediumCVE-2024-12119

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    		6.4
    MediumCVE-2025-5537

    FooPlugins Lightbox & Modal Popup WordPress Plugin: Cross-site Scripting

    		6.4
    MediumCVE-2024-5668

    FooPlugins Lightbox & Modal Popup WordPress Plugin: Cross-site Scripting

    		6.4
    MediumCVE-2024-3276

    FooBox (Free and Premium) < 2.7.28 - Admin+ Stored XSS

    		6.1
    MediumCVE-2025-32139

    FooPlugins FooBox Image Lightbox: Cross-site Scripting

    		5.9
    MediumCVE-2025-15524

    FooPlugins Gallery by FooGallery: Missing Authorization

    		4.3
    MediumCVE-2026-25363

    WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerability

    		4.3

    All vulnerabilities in search

    Products

    Products by FooPlugins
    Gallery by FooGallery170
    Gallery By Foogallery110
    Lightbox & Modal Popup Wordpress Plugin – Foobox40