Max Foundry MaxGalleria (WordPress plugin) vulnerabilities

Latest Max Foundry MaxGalleria (WordPress plugin) CVEs

Newest publication first

1. CVE-2022-25603 WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability

   Published 2022-03-18

   Medium·CVSS 4.8 EPSS 0.56%

   Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.