fooplugins Vulnerabilities and Affected Products
Vulnerabilities associated with FooGallery.
Products
Clear product- Gallery by FooGallery11 vulnerabilities
- FooGallery4 vulnerabilities
- Lightbox & Modal Popup WordPress Plugin – FooBox4 vulnerabilities
- Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar2 vulnerabilities
- Best Image Gallery & Responsive Photo Gallery – FooGallery1 vulnerability
- Best WordPress Gallery Plugin – FooGallery1 vulnerability
- FooBox Image Lightbox1 vulnerability
- foobox-image-lightbox-premium1 vulnerability
- lightbox_and_modal_popup1 vulnerability
- Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-25363MEDIUM | WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerabilityMissing Authorization vulnerability in FooPlugins FooGallery foogallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FooGallery: from n/a through <= 3.1.11. CWE-862Feb 19, 2026 | CVSS4.3v3.1 | EPSS0.185% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-25362MEDIUM | WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FooPlugins FooGallery foogallery allows Stored XSS.This issue affects FooGallery: from n/a through <= 3.1.11. CWE-79Feb 19, 2026 | CVSS5.9v3.1 | EPSS0.167% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-44244HIGH | WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.44 versions. CWE-79Oct 2, 2023 | CVSS7.1v3.1 | EPSS0.351% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-29439HIGH | WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions. | CVSS7.1v3.1 | EPSS1.75% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |