What’s Vulnerable › Products

firelightwp LightPress Lightbox vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your firelightwp LightPress Lightbox version is affected

Latest firelightwp LightPress Lightbox vulnerabilities

• CVE-2026-4379 — LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute (CVSS 6.4)
• CVE-2025-3649 — LightPress Lightbox < 2.3.4 - Contributor+ Stored XSS (CVSS 6.8)
• CVE-2024-5425 — WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute (CVSS 5.4)