High 7.5
2026-03-25< 3.5.2
CVE-2026-32537
Minimum safe version
3.5.2
Update to 3.5.2 or later to address 5 fixable vulnerabilities
CVE-2026-32537
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-4363
CVE-2022-2597
CVE-2022-2543