Firelightwp Lightpress Lightbox vulnerabilities

• firelightwp lightpress lightbox LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute CVE-2026-4379 6.4 MediumApril 8, 2026
• lightpress lightbox, firelightwp lightpress lightbox +1 more WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute CVE-2024-5425 6.4 MediumJune 7, 2024