Unknown WP Lightbox 2 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unknown WP Lightbox 2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-3745syedbalkhi · wp_lightbox_2 +2 moreWP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSSThe WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.EPSS0.25%MediumCVE-2026-1430unknown · wp lightbox 2 +1 moreWP Lightbox 2 < 3.0.7 - Admin+ Stored XSSThe WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).EPSS0.19%