| CVE-2026-6454 |
The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in versions up to and…
|
6.4
Medium
|
Jul 24, 2026 |
| CVE-2025-52707 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight…
|
6.5
Medium
|
Jun 20, 2025 |
| CVE-2024-5020 |
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox…
|
6.4
Medium
|
Dec 4, 2024 |
| CVE-2024-50460 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight…
|
5.9
Medium
|
Oct 28, 2024 |