What’s Vulnerable › Products

maxfoundry MaxGalleria vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your maxfoundry MaxGalleria version is affected

Latest maxfoundry MaxGalleria vulnerabilities

• CVE-2026-97260 — WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-5970 — MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode (CVSS 6.4)
• CVE-2024-3581 — MaxGalleria <= 6.4.2 - Missing Authorization (CVSS 4.3)
• CVE-2022-25603 — WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8)