LightPress Lightbox

Vulnerabilities 3Slug wp-jquery-lightboxLatest version 2.3.5WordPress.org →

Minimum safe version

2.3.5

Update to 2.3.5 or later to address 3 fixable vulnerabilities

Latest available2.3.5 ✓
N/A
2026-04-07< 2.3.5

LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute

WordfenceCVE
Medium 6.8
2025-05-12< 2.3.4

WordPress WP jQuery Lightbox Plugin < 2.3.4 is vulnerable to Cross Site Scripting (XSS)

PatchstackEUVDWordfenceCVE