Product by FooPlugins

    Gallery by FooGallery

    17 known vulnerabilities in Gallery by FooGallery (FooPlugins), 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gallery by FooGallery (FooPlugins)
    HighCVE-2023-29439

    WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

    7.1
    HighCVE-2023-6947

    Https://fooplugins.com FooGallery Premium: Path Traversal: '/../filedir'

    7.7
    MediumCVE-2024-2081

    FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting

    also in 1 other product

    6.4
    MediumCVE-2024-2122

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    also in 1 other product

    6.4
    HighCVE-2023-44244

    WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)

    7.1
    MediumCVE-2019-20182

    FooPlugins FooGallery: Cross-Site Scripting (XSS)

    4.8
    MediumCVE-2021-24357

    FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting

    5.4
    MediumCVE-2024-0604

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    also in 1 other product

    4.4
    MediumCVE-2023-6747

    FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    6.4
    MediumCVE-2024-2762

    FooGallery < 2.4.15 - Author+ Stored XSS

    6.3
    MediumCVE-2026-25362

    WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability

    5.9
    MediumCVE-2025-6068

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    also in 1 other product

    6.4
    MediumCVE-2024-2471

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    also in 1 other product

    6.4
    MediumCVE-2024-12119

    FooPlugins Gallery by FooGallery: Cross-site Scripting

    also in 1 other product

    6.4
    MediumCVE-2026-25363

    WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerability

    4.3
    MediumCVE-2024-12114

    FooPlugins Gallery by FooGallery: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    4.3
    HighCVE-2023-44233

    WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)

    5.4

    All products by FooPlugins