FooPlugins Gallery by FooGallery

• CVE-2025-15524 Medium 4.3 Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure 0.2%
• CVE-2025-6068 Medium 6.4 FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.2%
• CVE-2024-12114 Medium 4.3 FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates 0.3%
• CVE-2024-12119 Medium 6.4 FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size 0.3%
• CVE-2024-2122 Medium 6.4 FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL 0.5%
• CVE-2024-2081 Medium 6.4 FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting 0.6%
• CVE-2024-2471 Medium 6.4 FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields 0.3%
• CVE-2024-0604 Medium 4.4 Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings 0.6%
• CVE-2023-6747 Medium 6.4 FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%