Log in Start free

firelightwp

Products

ProductCVEsExploitedLatest
Firelight Lightbox2–Jul 24, 2026
LightPress Lightbox2–Apr 8, 2026

Exploited and recent CVEs

  • CVE-2026-6454 Medium 6.4 Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attribute 0.4%
  • CVE-2026-4379 Medium 6.4 LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute 0.3%
  • CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
  • CVE-2024-5425 Medium 6.4 WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute 0.3%