Medium 6.1
2026-05-01< 2.4.29
CVE-2024-13362
Gallery by FooGallery
Minimum safe version
3.1.13
Update to 3.1.13 or later to address 30 fixable vulnerabilities
Latest available3.1.26 ✓
Medium 5.9
2026-02-19< 3.1.13
CVE-2026-25362
Medium 4.3
2026-02-19< 3.1.13
CVE-2026-25363
Medium 4.3
2026-02-11< 3.1.10
CVE-2025-15524
Medium 6.4
2025-07-11< 2.4.32
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium 6.4
2025-03-08< 2.4.30
CVE-2024-12119
Medium 4.3
2025-03-08< 2.4.30
CVE-2024-12114
Medium 5.1
2025-03-04< 2.4.30
WordPress FooGallery Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS)
Medium 6.3
2024-10-16< 2.1.34
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium 5.4
2024-06-14< 2.4.16
CVE-2024-2122
Medium 5.4
2024-06-13< 2.4.15
CVE-2024-2762
Medium 5.4
2024-04-09< 2.4.15
CVE-2024-2081
Medium 5.4
2024-04-06< 2.4.15
CVE-2024-2471
Medium 4.8
2024-02-20< 2.4.9
CVE-2024-0604
Medium 5.4
2023-10-06< 2.3.2
CVE-2023-44233
High 7.1
2023-10-02< 2.3.2
CVE-2023-44244
N/A
2023-07-18< 2.2.44
WordPress FooGallery Plugin < 2.2.44 is vulnerable to Cross Site Scripting (XSS)
N/A
< 1.9.25
FooGallery < 1.9.25 - Authenticated Cross-Site Scripting (XSS)
High 7.1
2023-05-16< 2.2.41
CVE-2023-29439
N/A
2019-02-25< 1.6.17
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
N/A
2020-05-04< 1.9.25
FooGallery <= 1.9.24 - Authenticated Cross-Site Scripting
N/A
2022-03-04< 2.1.34
Freemius SDK <= 2.4.2 - Missing Authorization Checks
N/A
< 1.6.17
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
N/A
< 2.1.34
Unauthorised AJAX Calls via Freemius
N/A
2019-03-02< 1.6.17
WordPress FooGallery plugin <= 1.6.15 - Authenticated Option Update vulnerability (Fremius Library security issue)
N/A
2020-08-27< 1.9.25
WordPress FooGallery plugin <= 1.9.24 - Authenticated Cross-Site Scripting (XSS) vulnerability
N/A
2022-02-28< 2.1.34
WordPress FooGallery plugin <= 2.1.33 - Sensitive Information Disclosure vulnerability
N/A
2022-02-28< 2.1.34
WordPress FooGallery plugin <= 2.1.33 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Medium 4.8
2020-06-01< 1.8.18
FooGallery <= 1.8.12 - Cross-Site Scripting
Medium 5.4
2021-06-14< 2.0.35
CVE-2021-24357