What’s Vulnerable › Products

WP Lightbox 2 vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WP Lightbox 2 version is affected

Latest WP Lightbox 2 vulnerabilities

• CVE-2026-1430 — WP Lightbox 2 < 3.0.7 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2025-3745 — WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS (CVSS 6.3)
• CVE-2024-6263 — WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-45747 — WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)