FI
Vendor
firelightwp
6
CVEs
0
On KEV
0
New 30D
Products
FL6.4
Firelight Lightbox
firelightwp
5 CVEs0 on KEV0 new
LL6.4
LightPress Lightbox
firelightwp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-6454 | FL Firelight Lightbox firelightwp | 6.4 | Jul 24 | Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attribute |
| CVE-2026-4379 | LL LightPress Lightbox firelightwp | 6.4 | Apr 8 | LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute |
| CVE-2025-5035 | FL Firelight Lightbox Firelightwp | 5.4 | Jun 27 | Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS |
| CVE-2025-3597 | FL Firelight Lightbox Firelightwp | 5.9 | May 12 | Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS |
| CVE-2024-5020 | FL Firelight Lightbox firelightwp | 6.4 | Dec 4 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library |
| CVE-2024-50460 | FL Firelight Lightbox Firelightwp | 4.8 | Oct 28 | WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability |