Advisories · Technology

maxfoundry MaxGalleria.

Every CVE that names maxfoundry MaxGalleria among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97260 CVE record

CVSS 7.1 High

WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
- maxfoundry MaxGalleria
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2026
CVE-2024-5970 CVE record

CVSS 6.4 Medium

MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode
- maxfoundry MaxGalleria
- Cross-site scripting (XSS)
Not analysed yet 18 Jun 2024
CVE-2024-3581 CVE record

CVSS 4.3 Medium

MaxGalleria <= 6.4.2 - Missing Authorization
- maxfoundry MaxGalleria
- Broken access control
Not analysed yet 2 May 2024