Known vulnerabilities in FirelightWP LightPress Lightbox
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-4379 | The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `group` attribute in… | 6.4 Medium | Apr 8, 2026 |
| CVE-2024-5425 | The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in… | 6.4 Medium | Jun 7, 2024 |