Plugin icon

PrettyPhoto – Simple Lightbox Plugin

prettyphoto

Vulnerabilities:

3

Last Updated:

September 14, 2025

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2025-09-05
Title
prettyPhoto <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-06-05
Title
WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2015-05-05
Title
WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.2
CVSS
n/a