Vulnerability index

Browse CVEs

13 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Foogallery MEDIUM 5.4
CVE-2025-6068

The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Script…

Fix: 2.4.32+
Fix from $1,600 2025-07-11
Foobox MEDIUM 5.4
CVE-2025-5537

The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alternative texts in…

Fix: 2.7.35+
Fix from $1,600 2025-07-08
Foogallery MEDIUM 5.4
CVE-2024-12119

The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Script…

Fix: 2.4.30+
Fix from $1,600 2025-03-08
Foogallery HIGH 7.7
CVE-2023-6947

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26…

Fix: 2.4.27+
Fix from $1,950 2024-12-10
Foogallery MEDIUM 5.4
CVE-2024-2122

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via album gallery custom URLs in all…

Fix: 2.4.16+
Fix from $1,600 2024-06-14
Foogallery MEDIUM 5.4
CVE-2024-2762

The FooGallery WordPress plugin before 2.4.15, foogallery-premium WordPress plugin before 2.4.15 does not validate and escape some of its Gallery se…

Fix: 2.4.15+
Fix from $1,600 2024-06-13
Foogallery MEDIUM 5.4
CVE-2024-2081

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the foogallery_attachment_modal_…

Fix: 2.4.15+
Fix from $1,600 2024-04-09
Foogallery MEDIUM 5.4
CVE-2024-2471

The FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image attachment fields (such as 'Title', 'Alt Text', 'Custom UR…

Fix: 2.4.15+
Fix from $1,600 2024-04-06
Foogallery MEDIUM 5.4
CVE-2023-6747

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attributes in all ver…

Fix: 2.4.6+
Fix from $1,600 2024-01-03
Foogallery HIGH 8.8
CVE-2023-44233

Cross-Site Request Forgery (CSRF) vulnerability in FooPlugins Best WordPress Gallery Plugin – FooGallery plugin <= 2.2.44 versions.

Fix: after 2.2.44
Fix from $1,950 2023-10-06
Foogallery MEDIUM 6.1
CVE-2023-44244

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.44 versions.

Fix: after 2.2.44
Fix from $1,600 2023-10-02
Foogallery MEDIUM 6.1
CVE-2023-29439

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions.

Fix: after 2.2.35
Fix from $1,600 2023-05-16
Foogallery MEDIUM 5.4
CVE-2021-24357

In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properl…

Fix: 2.0.35+
Fix from $1,600 2021-06-14