FooPlugins vulnerabilities
We track 2 vulnerabilities in FooPlugins products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest FooPlugins vulnerabilities
- 7.2 High severity
Lightbox & Modal Popup WordPress Plugin – FooBox: Improper Neutralization of Input During Web Page Generation
The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'img alt attribute inside .wp-caption container' parameter in all versions up to, and including, 2.8.7 due to insufficient
- 7.7 High severity
FooGallery Premium: Improper Limitation of a Pathname to a Restricted Directory
The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26. This makes it possible for authenticated attackers, with contributor level or higher to read the contents of