Syedbalkhi Wp Lightbox 2 — known CVE vulnerabilities

Every CVE whose affected-product data names Syedbalkhi Wp Lightbox 2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-6263 — CVSS 6.4 (medium): The WP Lightbox 2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to…
• CVE-2025-3745 — CVSS 6.3 (medium): The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them…
• CVE-2023-45747 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Syed Balkhi WP Lightbox 2 plugin <= 3.0.6.5 versions.