Colorlib Fancybox
3 CVEs affecting Colorlib Fancybox. Latest disclosed: 2025-06-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3662 | Medium | 6.1 | 2025-06-03 | The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issu… |
CVE-2024-0662 | Medium | 4.4 | 2024-04-09 | The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient… |
CVE-2015-1494 | | 2015-02-17 | The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (… |