Known Vulnerabilities for WP Lightbox 2 by Smub
Listed below are 10 of the newest known vulnerabilities associated with "WP Lightbox 2" by "Smub".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-35055 json | XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts. An att... | Not Provided | 2026-04-01 | 2026-04-01 |
| CVE-2026-4379 json | The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `group` attribute in the `[... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-3347 json | The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `arv_lb[message... | Not Provided | 2026-03-21 | 2026-04-08 |
| CVE-2025-58784 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft ARI Fancy Light... | Not Provided | 2025-09-05 | 2026-04-23 |
| CVE-2025-57967 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Quick View f... | Not Provided | 2025-09-22 | 2026-04-23 |
| CVE-2025-57966 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery Lightb... | Not Provided | 2025-09-22 | 2026-04-23 |
| CVE-2025-54051 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LightBox Block... | Not Provided | 2025-07-16 | 2026-04-23 |
| CVE-2025-52707 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Firelight Lig... | Not Provided | 2025-06-20 | 2026-04-23 |
| CVE-2025-49397 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Colorbox Ligh... | Not Provided | 2025-08-20 | 2026-04-23 |
| CVE-2025-32139 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FooPlugins FooBox Image... | Not Provided | 2025-04-10 | 2026-04-23 |