firelightwp LightPress Lightbox

• CVE-2026-4379 Medium 6.4 LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute 0.3%
• CVE-2024-5425 Medium 6.4 WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute 0.3%