| CVE-2026-118438 |
The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before…
|
6.8
Moyenne
|
31 oct. 2026 |
| CVE-2026-118165 |
The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic…
|
6.8
Moyenne
|
30 oct. 2026 |
| CVE-2025-5035 |
The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting…
|
5.4
Moyenne
|
27 juin 2025 |
| CVE-2025-3597 |
The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from…
|
5.9
Moyenne
|
12 mai 2025 |