{"schemaVersion":3,"id":"CVE-2024-5020","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","dates":{"published":"2024-12-04T08:22:46.855Z","modified":"2026-04-08T17:27:10.759Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00433,"percentile":0.36475,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00433},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00433,"percentile":0.36475}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00433,"percentile":0.36475}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"10web","product":"form maker by 10web – mobile-friendly drag & drop contact form builder","name":"Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder","label":"form maker by 10web – mobile-friendly drag & drop contact form builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.15.27","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.15.27","eol":null,"hubHref":"/vendor/10web/form_maker_by_10web_-_mobile-friendly_drag__drop_contact_form_builder"},{"vendor":"bqworks","product":"accordion_slider","name":"accordion slider","label":"accordion_slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.9.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.9.12","eol":null,"hubHref":"/vendor/bqworks/accordion_slider"},{"vendor":"colorlibplugins","product":"fancybox for wordpress","name":"FancyBox for WordPress","label":"fancybox for wordpress","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.3.4","eol":null,"hubHref":"/vendor/colorlibplugins/fancybox_for_wordpress"},{"vendor":"dfactory","product":"responsive_lightbox_\\&_gallery","name":"responsive lightbox \\& gallery","label":"responsive_lightbox_\\&_gallery","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.4.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.4.8","eol":null,"hubHref":"/vendor/dfactory/responsive_lightbox__gallery"},{"vendor":"easy social feed","product":"easy social feed premium","name":"Easy Social Feed Premium","label":"easy social feed premium","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.6.2","eol":null,"hubHref":"/vendor/easy_social_feed/easy_social_feed_premium"},{"vendor":"extendthemes","product":"colibri page builder","name":"Colibri Page Builder","label":"colibri page builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.286","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.0.286","eol":null,"hubHref":"/vendor/extendthemes/colibri_page_builder"},{"vendor":"firelightwp","product":"firelight_lightbox","name":"firelight lightbox","label":"firelight_lightbox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.3.3","eol":null,"hubHref":"/vendor/firelightwp/firelight_lightbox"},{"vendor":"foliovision","product":"fv flowplayer video player","name":"FV Flowplayer Video Player","label":"fv flowplayer video player","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.5.47.7212","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 7.5.47.7212","eol":null,"hubHref":"/vendor/foliovision/fv_flowplayer_video_player"},{"vendor":"jetmonsters","product":"getwid – gutenberg blocks","name":"Getwid – Gutenberg Blocks","label":"getwid – gutenberg blocks","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.11","eol":null,"hubHref":"/vendor/jetmonsters/getwid_-_gutenberg_blocks"},{"vendor":"nko","product":"visual portfolio, photo gallery & post grid","name":"Visual Portfolio, Photo Gallery & Post Grid","label":"visual portfolio, photo gallery & post grid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.3.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.3.9","eol":null,"hubHref":"/vendor/nko/visual_portfolio_photo_gallery__post_grid"},{"vendor":"posimyththemes","product":"nexter blocks – gutenberg blocks, page builder & ai website builder","name":"Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder","label":"nexter blocks – gutenberg blocks, page builder & ai website builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.3.1","eol":null,"hubHref":"/vendor/posimyththemes/nexter_blocks_-_gutenberg_blocks_page_builder__ai_website_builder"},{"vendor":"shapedplugin","product":"carousel, slider, photo gallery with lightbox, video slider, by wp carousel","name":"Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel","label":"carousel, slider, photo gallery with lightbox, video slider, by wp carousel","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.6.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.6.8","eol":null,"hubHref":"/vendor/shapedplugin/carousel_slider_photo_gallery_with_lightbox_video_slider_by_wp_carousel"},{"vendor":"smub","product":"envira gallery – image photo gallery, albums, video gallery, slideshows & more","name":"Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More","label":"envira gallery – image photo gallery, albums, video gallery, slideshows & more","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.8.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.8.15","eol":null,"hubHref":"/vendor/smub/envira_gallery_-_image_photo_gallery_albums_video_gallery_slideshows__more"},{"vendor":"smub","product":"photo gallery, sliders, proofing and themes – nextgen gallery","name":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","label":"photo gallery, sliders, proofing and themes – nextgen gallery","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.59.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.59.4","eol":null,"hubHref":"/vendor/smub/photo_gallery_sliders_proofing_and_themes_-_nextgen_gallery"},{"vendor":"wordpress","product":"accordion-slider","name":"Accordion Slider","label":"accordion-slider","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.9.12 (fixed in 1.9.13)","noFixRecorded":false,"fixedIn":"1.9.13"}],"versionsText":"≤ 1.9.12 (fixed in 1.9.13)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"colibri-page-builder","name":"Colibri Page Builder","label":"colibri-page-builder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.286 (fixed in 1.0.288)","noFixRecorded":false,"fixedIn":"1.0.288"}],"versionsText":"≤ 1.0.286 (fixed in 1.0.288)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-facebook-likebox-premium","name":"Easy Social Feed Pro","label":"easy-facebook-likebox-premium","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.6.2","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-fancybox","name":"Firelight Lightbox","label":"easy-fancybox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.3.3 (fixed in 2.3.4)","noFixRecorded":false,"fixedIn":"2.3.4"}],"versionsText":"≤ 2.3.3 (fixed in 2.3.4)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"envira-gallery-lite","name":"Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More","label":"envira-gallery-lite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.8.15 (fixed in 1.8.16)","noFixRecorded":false,"fixedIn":"1.8.16"}],"versionsText":"≤ 1.8.15 (fixed in 1.8.16)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"fancybox-for-wordpress","name":"FancyBox for WordPress","label":"fancybox-for-wordpress","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.3.4 (fixed in 3.3.5)","noFixRecorded":false,"fixedIn":"3.3.5"}],"versionsText":"≤ 3.3.4 (fixed in 3.3.5)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"form-maker","name":"Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder","label":"form-maker","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.15.27 (fixed in 1.15.28)","noFixRecorded":false,"fixedIn":"1.15.28"}],"versionsText":"≤ 1.15.27 (fixed in 1.15.28)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"fv-wordpress-flowplayer","name":"FV Flowplayer Video Player","label":"fv-wordpress-flowplayer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 7.5.47.7212 (fixed in 7.5.48.7212)","noFixRecorded":false,"fixedIn":"7.5.48.7212"}],"versionsText":"≤ 7.5.47.7212 (fixed in 7.5.48.7212)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"getwid","name":"Getwid – Gutenberg Blocks","label":"getwid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.11 (fixed in 2.0.12)","noFixRecorded":false,"fixedIn":"2.0.12"}],"versionsText":"≤ 2.0.11 (fixed in 2.0.12)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"nextgen-gallery","name":"Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery","label":"nextgen-gallery","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.59.4 (fixed in 3.59.5)","noFixRecorded":false,"fixedIn":"3.59.5"}],"versionsText":"≤ 3.59.4 (fixed in 3.59.5)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"responsive-lightbox","name":"Responsive Lightbox & Gallery","label":"responsive-lightbox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.4.8 (fixed in 2.4.9)","noFixRecorded":false,"fixedIn":"2.4.9"}],"versionsText":"≤ 2.4.8 (fixed in 2.4.9)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"the-plus-addons-for-block-editor","name":"Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder","label":"the-plus-addons-for-block-editor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.3.1 (fixed in 4.3.2)","noFixRecorded":false,"fixedIn":"4.3.2"}],"versionsText":"≤ 4.3.1 (fixed in 4.3.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"visual-portfolio","name":"Gallery by Visual Portfolio","label":"visual-portfolio","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.3.9 (fixed in 3.3.10)","noFixRecorded":false,"fixedIn":"3.3.10"}],"versionsText":"≤ 3.3.9 (fixed in 3.3.10)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-smart-quick-view","name":"WPC Smart Quick View for WooCommerce","label":"woo-smart-quick-view","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.1.1 (fixed in 4.1.2)","noFixRecorded":false,"fixedIn":"4.1.2"}],"versionsText":"≤ 4.1.1 (fixed in 4.1.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-carousel-free","name":"Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel","label":"wp-carousel-free","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.6.8 (fixed in 2.6.9)","noFixRecorded":false,"fixedIn":"2.6.9"}],"versionsText":"≤ 2.6.8 (fixed in 2.6.9)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-responsive-slider-with-lightbox","name":"Thumbnail Slider With Lightbox","label":"wp-responsive-slider-with-lightbox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.21 (fixed in 1.0.22)","noFixRecorded":false,"fixedIn":"1.0.22"}],"versionsText":"≤ 1.0.21 (fixed in 1.0.22)","eol":null,"hubHref":null},{"vendor":"wpclever","product":"wpc_smart_quick_view_for_woocommerce","name":"wpc smart quick view for woocommerce","label":"wpc_smart_quick_view_for_woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.1.1","eol":null,"hubHref":"/vendor/wpclever/wpc_smart_quick_view_for_woocommerce"}],"affectedCount":31,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d99d4b9a-aa09-434d-91a8-7afaa0e8b5db?source=cve","label":"www.wordfence.com/threat-intel/vulnerabilities/id/d99d4b9a-aa09-434d-91a8-7afaa0e8b5db?source=cve","hostname":"www.wordfence.com","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3150376/woo-smart-quick-view","label":"plugins.trac.wordpress.org/changeset/3150376/woo-smart-quick-view","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3153081/colibri-page-builder","label":"plugins.trac.wordpress.org/changeset/3153081/colibri-page-builder","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3157076/nextgen-gallery","label":"plugins.trac.wordpress.org/changeset/3157076/nextgen-gallery","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3158415/envira-gallery-lite","label":"plugins.trac.wordpress.org/changeset/3158415/envira-gallery-lite","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3156791/form-maker","label":"plugins.trac.wordpress.org/changeset/3156791/form-maker","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3160432/visual-portfolio","label":"plugins.trac.wordpress.org/changeset/3160432/visual-portfolio","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3161422/fv-wordpress-flowplayer","label":"plugins.trac.wordpress.org/changeset/3161422/fv-wordpress-flowplayer","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3160232/easy-fancybox","label":"plugins.trac.wordpress.org/changeset/3160232/easy-fancybox","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3161892/wp-carousel-free","label":"plugins.trac.wordpress.org/changeset/3161892/wp-carousel-free","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3173097/responsive-lightbox","label":"plugins.trac.wordpress.org/changeset/3173097/responsive-lightbox","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3175577%40getwid%2Ftrunk&old=3119180%40getwid%2Ftrunk&sfp_email=&sfph_mail=","label":"plugins.trac.wordpress.org/changeset","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3186301%40fancybox-for-wordpress%2Ftrunk&old=3058912%40fancybox-for-wordpress%2Ftrunk&sfp_email=&sfph_mail=","label":"plugins.trac.wordpress.org/changeset","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3169926/accordion-slider","label":"plugins.trac.wordpress.org/changeset/3169926/accordion-slider","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3306189%40the-plus-addons-for-block-editor&new=3306189%40the-plus-addons-for-block-editor&sfp_email=&sfph_mail=","label":"plugins.trac.wordpress.org/changeset","hostname":"plugins.trac.wordpress.org","tags":[]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/910a877d-384f-46a3-b90d-bc56543caa03","label":"www.wordfence.com/threat-intel/vulnerabilities/id/910a877d-384f-46a3-b90d-bc56543caa03","hostname":"www.wordfence.com","tags":["Vendor Advisory"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d99d4b9a-aa09-434d-91a8-7afaa0e8b5db","label":"www.wordfence.com/threat-intel/vulnerabilities/id/d99d4b9a-aa09-434d-91a8-7afaa0e8b5db","hostname":"www.wordfence.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-12-04T08:22:46.855Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-08T17:27:10.759Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T18:32:09.223Z","stale":false,"partial":false}}