Fooplugins Foogallery — known CVE vulnerabilities

Every CVE whose affected-product data names Fooplugins Foogallery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2023-6947 — CVSS 7.7 (high): The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and…
• CVE-2023-44244 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.44 versions.
• CVE-2023-29439 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions.
• CVE-2024-2122 — CVSS 6.4 (medium): The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via album gallery custom…
• CVE-2024-12119 — CVSS 6.4 (medium): The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored…
• CVE-2024-2081 — CVSS 6.4 (medium): The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
• CVE-2024-2471 — CVSS 6.4 (medium): The FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image attachment fields (such as 'Title', 'Alt Text'…
• CVE-2023-6747 — CVSS 6.4 (medium): The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom…
• CVE-2025-6068 — CVSS 6.4 (medium): The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored…
• CVE-2023-44233 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in FooPlugins Best WordPress Gallery Plugin – FooGallery plugin <= 2.2.44 versions.
• CVE-2024-2762 — CVSS 5.4 (medium): The FooGallery WordPress plugin before 2.4.15, foogallery-premium WordPress plugin before 2.4.15 does not validate and escape some of its…
• CVE-2021-24357 — CVSS 5.4 (medium): In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is…
• CVE-2019-20182 — CVSS 4.8 (medium): The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.
• CVE-2024-0604 — CVSS 4.4 (medium): The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in…
• CVE-2024-12114 — CVSS 4.3 (medium): The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure…