CVE-2023-44233 WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in FooPlugins Best WordPress Gallery Plugin – FooGallery plugin = 2.2.44 versions...

CVE-2023-44233

CVE-2023-44233 affects FooPlugins’ FooGallery WordPress plugin versions

PT-2023-29158 · Fooplugins · Foogallery

Name of the Vulnerable Software and Affected Versions: FooPlugins Best WordPress Gallery Plugin – FooGallery plugin versions = 2.2.44 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

CVE-2023-44244

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.44 versions...

CVE-2023-44244

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.44 versions...

CVE-2023-44244

CVE-2023-44244 affects FooPlugins FooGallery WordPress plugin versions 2.2.44, specifically to 2.3.2. No exploitation details are provided in the documents beyond the XSS classification.

WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)

Software FooGallery Type Plugin Vulnerable versions = 2.2.44 Fixed in 2.3.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44233 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 27eb9518b12d Credits RE-ALTER Required...

CVE-2023-29439

Unauth. Reflected Cross-Site Scripting XSS vulnerability in FooPlugins FooGallery plugin = 2.2.35 versions...

WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

Software FooGallery Type Plugin Vulnerable versions = 2.2.35 Fixed in 2.2.41 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29439 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6955856030c5 Credits LOURCODE Required...

WordPress FooGallery plugin <= 2.0.30 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by avolume in WordPress FooGallery plugin versions = 2.0.30. Solution Update the WordPress FooGallery plugin to the latest available version at least 2.0.35...

CVE-2019-20182

The FooGallery plugin 1.8.12 for WordPress allow XSS via the posttitle parameter...

CVE-2019-20182

The CVE refers to the WordPress FooGallery plugin version 1.8.12 with a stored cross-site scripting (XSS) flaw exploitable via the post_title parameter. Multiple sources (NVD, Red Hat, CNVD, OpenVAS, etc.) consistently describe XSS in FooGallery 1.8.12/related builds. The NVD metrics (CVSS‑3.1 ba...