WordPress foogallery has 13 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2023-6947 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includin | high | 7.7 | <2.4.27 | 2.4.27 |
| CVE-2019-20182 | The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter. | medium | 4.8 | <=1.8.12 | – |
| CVE-2021-24357 | In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is no | medium | 5.4 | <2.0.35 | 2.0.35 |
| CVE-2024-0604 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all v | medium | 4.4 | <=2.4.7 | – |
| CVE-2024-2081 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the foogallery_attachme | medium | 6.4 | <2.4.15 | 2.4.15 |
| CVE-2024-2122 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via album gallery custom UR | medium | 6.4 | <2.4.16 | 2.4.16 |
| CVE-2023-6747 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attributes i | medium | 6.4 | <2.4.6 | 2.4.6 |
| CVE-2024-2762 | The FooGallery WordPress plugin before 2.4.15, foogallery-premium WordPress plugin before 2.4.15 does not validate and escape some of its G | medium | 5.4 | <2.4.15 | 2.4.15 |
| CVE-2024-2471 | The FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image attachment fields (such as 'Title', 'Alt Text', ' | medium | 6.4 | <2.4.15 | 2.4.15 |
| CVE-2024-12114 | The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct | medium | 4.3 | <2.4.30 | 2.4.30 |
| CVE-2024-12119 | The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Si | medium | 6.4 | <2.4.30 | 2.4.30 |
| CVE-2023-44233 | Cross-Site Request Forgery (CSRF) vulnerability in FooPlugins Best WordPress Gallery Plugin – FooGallery plugin <= 2.2.44 versions. | medium | 5.4 | <=2.2.44 | – |
| CVE-2025-6068 | The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Si | medium | 6.4 | <2.4.32 | 2.4.32 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked