Login Request a demo
LL
Product
LightPress Lightbox
by firelightwp · last CVE Apr 8, 2026
2
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add LightPress Lightbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4379
6.4
0%
Apr 8
LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute
Affected: through 2.3.4
CVE-2024-5425
5.4
0%
Jun 7
WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute
Affected: through 1.5.4
Showing 2