WordPress plugin
FooGallery Photo Gallery : Image, Video & Masonry Galleries security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High3
- Medium22
- Low0
All FooGallery Photo Gallery : Image, Video & Masonry Galleries vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Reflected Cross-Site Scripting <2.3.2Update to 2.3.2 | CVE-2023-44244 | |
| High8.3 | Authenticated Cross-Site Scripting <1.9.25Update to 1.9.25 | — | |
| High8.8 | Missing Authorization to Arbitrary Options Update <3.1.7Update to 3.1.7 | — |
- High7.2Reflected Cross-Site Scripting
<2.3.2Update to 2.3.2
- High8.3Authenticated Cross-Site Scripting
<1.9.25Update to 1.9.25
- High8.8Missing Authorization to Arbitrary Options Update
<3.1.7Update to 3.1.7
FooGallery Photo Gallery : Image, Video & Masonry Galleries: common questions
Does FooGallery Photo Gallery : Image, Video & Masonry Galleries have known vulnerabilities?
Yes. VulnCrest Radar lists 25 known vulnerabilities in FooGallery Photo Gallery : Image, Video & Masonry Galleries: 3 high, 22 medium. At least one is not fixed in the latest version.
How do I check which version of FooGallery Photo Gallery : Image, Video & Masonry Galleries I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent FooGallery Photo Gallery : Image, Video & Masonry Galleries vulnerability?
CVE-2026-85414, published Sep 4, 2026: Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute. Severity: Medium (CVSS 6.4).
Is any FooGallery Photo Gallery : Image, Video & Masonry Galleries vulnerability listed in CISA KEV?
No. None of the known FooGallery Photo Gallery : Image, Video & Masonry Galleries vulnerabilities is currently listed in the CISA KEV catalog.