Mittel
CVE-2026-85414
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 28
Filter zurücksetzen
Mittel
CVE-2026-9134
Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter
Mittel
CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Mittel
CVE-2026-25362
FooGallery <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting
Mittel
CVE-2026-25363
FooGallery <= 3.1.11 - Missing Authorization
Mittel
CVE-2025-15524
Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure
Mittel
CVE-2025-6068
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Mittel
CVE-2024-12114
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates
Mittel
CVE-2024-12119
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size
Mittel
CVE-2025-22624
FooGallery <= 2.4.29 - Reflected Cross-Site Scripting
Mittel
CVE-2025-23889
FooGallery Captions <= 1.0.2 - Reflected Cross-Site Scripting
Hoch
CVE-2023-6947
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
Mittel
CVE-2024-2122
FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL
Mittel
CVE-2024-2762
FooGallery (Free and Premium) < 2.4.15 - Authenticated (Author+) Stored Cross-Site Scripting
Mittel
CVE-2024-2081
FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting
Mittel
CVE-2024-2471
FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields
Niedrig
CVE-2024-31342
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
Mittel
CVE-2024-0604
Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Mittel
CVE-2023-6747
FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2023-44233
FooGallery <= 2.2.44 - Cross-Site Request Forgery
Hoch
CVE-2023-44244
FooGallery <= 2.2.44 - Reflected Cross-Site Scripting
Mittel
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Mittel
CVE-2023-29439
FooGallery <= 2.2.35 - Reflected Cross-Site Scripting
Mittel
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.