6.3
Medium
CVE-2025-3745 The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of…
Description
The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Lightbox 2 3.0 | earliest → < 3.0.6.8 | 3.0.6.8 |