FooPlugins vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20233
3. 20247
4. 20255
5. 20266

Newest CVEs

• CVE-2026-85414

  Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute

  fooplugins · Gallery : FooGallery

  Medium6.4
• CVE-2026-9134

  Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter

  fooplugins · Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel

  Medium6.4
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-25363

  WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerability

  FooPlugins · FooGallery

  Medium4.3
• CVE-2026-25362

  WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability

  FooPlugins · FooGallery

  Medium5.9
• CVE-2025-15524

  Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure

  fooplugins · Gallery by FooGallery

  Medium4.3
• CVE-2025-6068

  FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

  fooplugins · Gallery by FooGallery

  Medium6.4
• CVE-2025-5537

  Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scripting

  fooplugins · Lightbox & Modal Popup WordPress Plugin – FooBox

  Medium6.4
• CVE-2025-32139

  WordPress Lightbox & Modal Popup WordPress Plugin – FooBox plugin <= 2.7.33 - Cross Site Scripting (XSS) vulnerability

  FooPlugins · FooBox Image Lightbox

  Medium5.9
• CVE-2024-12114

  FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates

  fooplugins · Gallery by FooGallery

  Medium4.3