Known Vulnerabilities for WP Lightbox 2 by Smub
Listed below are 10 of the newest known vulnerabilities associated with "WP Lightbox 2" by "Smub".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-107756 json | The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' paramete... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-107178 json | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-103897 json | The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' paramet... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-97290 json | Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-92622 json | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attr... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-87848 json | The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentication on one of its AJAX a... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-81894 json | Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-image C... | Not Provided | 2026-09-15 | 2026-09-22 |
| CVE-2026-66434 json | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-18121 json | Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) because the frontend calendar lightbox endpoint ... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-14833 json | The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rendering... | Not Provided | 2026-07-31 | 2026-07-31 |