Firelight Lightbox

Vulnerabilities 6Slug easy-fancyboxLatest version 2.3.20WordPress.org →

Minimum safe version

2.3.17

Update to 2.3.17 or later to address 6 fixable vulnerabilities

Latest available2.3.20 ✓
Medium 5.4
2025-06-27< 2.3.16

Firelight Lightbox <= 2.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 5.9
2025-05-12< 2.3.15

Firelight Lightbox <= 2.3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2024-12-04< 2.3.4

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

CVEWordfencePatchstack