Firelight Lightbox
Firelightwp · 3 CVEs
CVE-2026-6454
MEDIUM
Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' A…
Jul 24, 2026
CVE-2025-5035
MEDIUM
Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS
Jun 27, 2025
CVE-2025-3597
MEDIUM
Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS
May 12, 2025
CVE-2024-5020
MEDIUM
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBo…
Dec 4, 2024
CVE-2024-50460
MEDIUM
WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
Oct 28, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-6454 | Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attribute | MEDIUM | 0.36% | Jul 24, 2026 |
| CVE-2025-5035 | Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS | MEDIUM | 0.23% | Jun 27, 2025 |
| CVE-2025-3597 | Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS | MEDIUM | 0.31% | May 12, 2025 |
| CVE-2024-5020 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library | MEDIUM | 0.43% | Dec 4, 2024 |
| CVE-2024-50460 | WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.26% | Oct 28, 2024 |
Showing 1 to 3 of 3 CVEs