Lightpress

2 CVEs across 1 Lightpress products. Browse Lightpress vulnerabilities, severities, and proof-of-concept exploits.

Lightpress products with known CVEs

ProductCVEs
Lightbox2
Lightpress CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-3649Medium6.82025-05-12The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contr…
CVE-2024-5425Medium6.42024-06-07The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in all versions up to, and including, 1.5.4…