Medium 6.5
2025-07-04< 1.0.4
CVE-2025-26591
Minimum safe version
1.0.4
Update to 1.0.4 or later to address 4 fixable vulnerabilities
CVE-2025-26591
Fancy Lightbox < 1.0.2 - Authenticated Stored Cross-Site Scripting
WordPress fancybox <= 1.0.2 - Stored Cross-Site Scripting
WordPress WP fancybox plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability