GB
Product
Gallery by FooGallery
9
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 9Low 0
Watch
Add Gallery by FooGallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6068 | 5.4 | Jul 11 | FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Affected: through 2.4.31 |
| CVE-2024-12119 | 5.4 | Mar 8 | FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size Affected: through 2.4.29 |
| CVE-2024-2122 | 5.4 | Jun 14 | FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL Affected: through 2.4.15 |
| CVE-2024-2081 | 5.4 | Apr 9 | FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting Affected: through 2.4.14 |
| CVE-2024-2471 | 5.4 | Apr 6 | FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields Affected: through 2.4.14 |
| CVE-2023-6747 | 5.4 | Jan 3 | FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.4.8 |
| CVE-2024-0604 | 4.8 | Feb 20 | Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings Affected: through 2.4.7 |
| CVE-2025-15524 | 4.3 | Feb 11 | Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure Affected: through 3.1.9 |
| CVE-2024-12114 | 4.3 | Mar 8 | FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates Affected: through 2.4.29 |
Showing 9