| CVE-2026-118438 |
The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before…
|
6.8
Medium
|
Oct 31, 2026 |
| CVE-2026-118165 |
The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic…
|
6.8
Medium
|
Oct 30, 2026 |
| CVE-2025-5035 |
The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting…
|
5.4
Medium
|
Jun 27, 2025 |
| CVE-2025-3597 |
The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from…
|
5.9
Medium
|
May 12, 2025 |