Plugin icon

Firelight Lightbox

easy-fancybox

Vulnerabilities:

6

Last Updated:

June 13, 2025

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-06-19
Title
Firelight Lightbox < 2.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.17
CVSS
6.4 (medium)
Published
2025-06-06
Title
Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS
Fixed in
Fixed in 2.3.16
CVSS
6.8 (medium)
Published
2025-04-21
Title
Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS
Fixed in
Fixed in 2.3.15
CVSS
5.9 (medium)
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Fixed in
Fixed in 2.3.4
CVSS
5.9 (medium)
Published
2024-10-24
Title
Firelight Lightbox < 2.3.4 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.4
CVSS
6.4 (medium)
Published
2019-09-25
Title
Easy Fancybox < 1.8.18 - Authenticated Stored XSS
Fixed in
Fixed in 1.8.18
CVSS
4.8 (medium)