FooGallery
FooPlugins
Developer
3.1.0
Latest version
100,000
Installations
Nov 7, 2025
Last updated
Vulnerability history
0 present
16 fixed
6 Mitigation rules
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability<= 2.4.31Jul 10, 2025
- Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates vulnerability<= 2.4.29Mar 8, 2025
- Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size vulnerability<= 2.4.29Mar 8, 2025
- Reflected Cross-Site Scripting vulnerability<= 2.4.29Mar 4, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL vulnerability<= 2.4.15Jun 14, 2024
- Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields vulnerability<= 2.4.14Apr 8, 2024
- FooGallery plugin <= 2.4.7 -Authenticated Stored Cross-Site Scripting vulnerability<= 2.4.7Feb 14, 2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.2.44Sep 29, 2023
- Cross Site Request Forgery (CSRF) vulnerability<= 2.2.44Sep 29, 2023
- Reflected Cross Site Scripting (XSS) vulnerability< 2.2.44Jul 18, 2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.2.35Apr 13, 2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability<= 2.1.33Feb 28, 2022
- Sensitive Information Disclosure vulnerability<= 2.1.33Feb 28, 2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.0.30May 31, 2021
- Authenticated Cross-Site Scripting (XSS) vulnerability<= 1.9.24Aug 27, 2020
- Authenticated Option Update vulnerability (Fremius Library security issue)<= 1.6.15Mar 2, 2019