Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
foobox-image-lightbox
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Lightbox & Modal Popup WordPress Plugin <= 2.8.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Image Alt Attribute in .wp-caption Containers
CVE-2026-120687
foobox-image-lightbox
WordPress
High
Fix reported
2026-11-14
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
add-expires-headers
add-fields-to-checkout-page-woocommerce
WordPress
Medium
Fix reported
2026-10-16
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2025-5537
foobox-image-lightbox
WordPress
Medium
Fix reported
2025-07-08
FooBox Image Lightbox <= 2.7.33 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2025-32139
foobox-image-lightbox
WordPress
Medium
Fix reported
2025-04-11
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.28 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
CVE-2024-5668
foobox-image-lightbox
WordPress
Medium
Fix reported
2024-08-08
Lightbox & Modal Popup WordPress Plugin – FooBox (Free and Premium) <= 2.7.27 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-3276
foobox-image-lightbox-premium
foobox-image-lightbox
WordPress
Medium
Fix reported
2024-05-31
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
404-to-301
a-staff
WordPress
High
Fix reported
2024-01-22