Medium 6.5 Unfixed
2025-09-05≤ 1.2.5
CVE-2025-58808
Minimum safe version
1.2.4
Update to 1.2.4 or later to address 4 fixable vulnerabilities
CVE-2025-58808
CVE-2024-5162
WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting (XSS)
WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting
WordPress prettyPhoto Plugin <= 1.1 - Cross Site Scripting (XSS)