Essentialplugin Album And Image Gallery Plus Lightbox
3 CVEs affecting Essentialplugin Album And Image Gallery Plus Lightbox. Latest disclosed: 2026-04-17. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6443 | Critical | 9.8 | 2026-04-17 | All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious th… |
CVE-2024-4194 | Medium | 6.5 | 2024-06-06 | The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0. Th… |
CVE-2025-13612 | Medium | 6.4 | 2026-02-19 | The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `aigpl-gallery-album` shortcode in… |