Firelightwp vulnerabilities

Products

• Firelight Lightbox 8
• Firelight Lightbox 3
• Lightpress Lightbox 2

Newest

• firelightwp firelight lightbox Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute CVE-2026-118438 6.8 MediumOctober 31, 2026
• firelightwp firelight lightbox Firelight Lightbox < 2.3.23 - Contributor+ Stored XSS via Lightbox Link 'href' Attribute CVE-2026-118165 6.8 MediumOctober 30, 2026
• firelightwp firelight lightbox Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attribute CVE-2026-6454 6.4 MediumJuly 24, 2026
• firelightwp lightpress lightbox LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute CVE-2026-4379 6.4 MediumApril 8, 2026
• firelightwp firelight lightbox Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS CVE-2025-5035 5.4 MediumJune 27, 2025
• firelight lightbox, firelightwp firelight lightbox +1 more WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability CVE-2025-52707 6.5 MediumJune 20, 2025
• firelightwp firelight lightbox Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS CVE-2025-3597 5.9 MediumMay 12, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• firelight lightbox, firelightwp firelight lightbox +1 more WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-50460 5.9 MediumOctober 28, 2024
• lightpress lightbox, firelightwp lightpress lightbox +1 more WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute CVE-2024-5425 6.4 MediumJune 7, 2024