Medium 6.5
2025-08-20< 1.1.6
CVE-2025-49397
Minimum safe version
1.1.6
Update to 1.1.6 or later to address 4 fixable vulnerabilities
CVE-2025-49397
Colorbox Lightbox < 1.1.5 - Contributor+ Stored Cross-Site Scripting
WordPress Colorbox Lightbox Plugin <= 1.1.4 - Stored Cross-Site Scripting
WordPress Colorbox Lightbox plugin <= 1.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability