Known vulnerabilities in Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel

Photo Gallery, Image Gallery by FooGallery — fast, responsive, SEO-optimized, and packed with beautiful layouts.

21Reported vulnerabilities

8.8Highest CVSS score

3.2.6Latest version

100,000+Active installs

What to do now

Update Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel to 3.3.3 or later. 21 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 6, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-2762	Medium 5.4	0.4%	Before 2.4.15	`2.4.15`	June 13, 2024
CVE-2021-24357	Medium 5.4	0.6%	Before 2.0.35	`2.0.35`	June 14, 2021
CVE-2024-0604	Medium 4.8	0.6%	2.4.7 and earlier	`2.4.9`	February 29, 2024
CVE-2023-44233	High 8.8	0.2%	2.2.44 and earlier	`2.3.2`	October 6, 2023
WF-42b24b41-c520-4bb8-ba56-6f35500ee90e	High 8.3	—	Before 1.9.25	`1.9.25`	May 4, 2020
CVE-2023-44244	High 7.2	0.4%	Before 2.3.2	`2.3.2`	September 29, 2023
CVE-2023-29439	Medium 6.1	1.7%	2.2.35 and earlier	`2.2.41`	April 13, 2023
CVE-2026-9134	Medium 6.4	0.3%	0 to 3.1.31 (inclusive)	`3.1.32`	June 13, 2026
CVE-2026-85414	Medium 6.4	0.2%	0 to 3.3.2 (inclusive)	`3.3.3`	September 5, 2026
CVE-2026-25362	Medium 6.4	0.2%	3.1.11 and earlier	`3.1.13`	February 15, 2026
CVE-2025-22624	Medium 6.1	0.4%	2.4.29 and earlier	`2.4.30`	February 27, 2025
CVE-2024-12119	Medium 5.4	0.3%	Before 2.4.30	`2.4.30`	March 8, 2025
CVE-2024-2122	Medium 5.4	0.5%	Before 2.4.16	`2.4.16`	June 14, 2024
CVE-2024-2081	Medium 5.4	0.6%	Before 2.4.15	`2.4.15`	April 9, 2024
CVE-2024-2471	Medium 5.4	0.3%	Before 2.4.15	`2.4.15`	April 6, 2024
CVE-2023-6747	Medium 5.4	0.4%	Before 2.4.6	`2.4.6`	January 3, 2024
CVE-2025-6068	Medium 5.4	0.2%	Before 2.4.32	`2.4.32`	July 11, 2025
CVE-2019-20182	Medium 4.8	0.7%	1.8.12 and earlier	`1.8.18`	January 9, 2020
CVE-2026-25363	Medium 4.3	0.2%	3.1.11 and earlier	`3.1.13`	February 15, 2026
CVE-2025-15524	Medium 4.3	0.2%	0 to 3.1.9 (inclusive)	`3.1.10`	February 11, 2026
CVE-2024-12114	Medium 4.3	0.3%	Before 2.4.30	`2.4.30`	March 8, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.