Firelightwp Firelight Lightbox — known CVE vulnerabilities

Every CVE whose affected-product data names Firelightwp Firelight Lightbox, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-50460 — CVSS 5.9 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Firelight Lightbox…
• CVE-2025-3597 — CVSS 5.9 (medium): The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary…
• CVE-2025-5035 — CVSS 5.4 (medium): The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page…