🔍 What is Firelight Lightbox?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-5035

MEDIUM CVSS 5.4 Jun 27, 2025

The Firelight Lightbox WordPress plugin before version 2.3.16 has a stored cross-site scripting (XSS) vulnerability in title attributes. This allows users with contributor-level permissions or higher ...

CVE-2025-3597

MEDIUM CVSS 5.9 May 12, 2025

The Firelight Lightbox WordPress plugin before version 2.3.15 allows users with post writing capabilities to execute arbitrary JavaScript when the jQuery Metadata library is enabled. This vulnerabilit...

CVE-2024-50460

MEDIUM CVSS 5.9 Oct 28, 2024

This stored cross-site scripting (XSS) vulnerability in the Firelight Lightbox WordPress plugin allows attackers to inject malicious scripts into web pages. When users view pages containing the inject...