FooGallery
FooPlugins
Developer
3.1.13
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
20 patched
6 Mitigation rules
- Broken Access Control vulnerability<= 3.1.1115/02/2026
- Cross Site Scripting (XSS) vulnerability<= 3.1.1115/02/2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure vulnerability<= 3.1.910/02/2026
- Authenticated (Author+) Stored Cross-Site Scripting vulnerability<= 2.4.1402/02/2026
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability<= 2.4.3110/07/2025
- Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates vulnerability<= 2.4.2908/03/2025
- Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size vulnerability<= 2.4.2908/03/2025
- Reflected Cross-Site Scripting vulnerability<= 2.4.2904/03/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL vulnerability<= 2.4.1514/06/2024
- Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields vulnerability<= 2.4.1408/04/2024
- FooGallery plugin <= 2.4.7 -Authenticated Stored Cross-Site Scripting vulnerability<= 2.4.714/02/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.2.4429/09/2023
- Cross Site Request Forgery (CSRF) vulnerability<= 2.2.4429/09/2023
- Reflected Cross Site Scripting (XSS) vulnerability< 2.2.4418/07/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.2.3513/04/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability<= 2.1.3328/02/2022
- Sensitive Information Disclosure vulnerability<= 2.1.3328/02/2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.0.3031/05/2021
- Authenticated Cross-Site Scripting (XSS) vulnerability<= 1.9.2427/08/2020
- Authenticated Option Update vulnerability (Fremius Library security issue)<= 1.6.1502/03/2019