Foundation Columns

Foundation Columns has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Foundation Columns has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by SOPROBRO. Foundation Columns is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Foundation Columns vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-22747

Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-01-14 00:00	Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Foundation Columns <= 0.8	`CVE-2025-22747`	6.4 Medium	SOPROBRO	No

Showing 1–1 of 1 reports

Latestv0.8

Foundation Columns

Author

tormorten

4.5(2)

90/100

Last Updated

2015-05-08 (12y ago)

Active Installs

40+

Downloads

4,534

Requires WP

3.7+

Requires PHP

Tested up to

WP 4.7.35

Created

2014-05-26 (13y ago)

Adds support for using Zurb’s Foundation grid-system via shortcodes in WordPress’ TinyMCE editor. For more information about Foundation, please read the docs. This plugin is compatible with version 5 and version 6 of Foundation, and includes support for small, medium and large breakpoints. Now also with support for block grids. Modifying the grid If your grid has more than the default 12 columns you can use the foundation_columns_count filter. add_filter( 'foundation_columns_count', function($count) { $count = 16; return $count; } ); If you would like to contribute to this plugin. Please open a pull request on Github Please note: This plugin does not install Foundation for you and therefore require that you use a theme built on Foundation.

View on WordPress.org