CVE-2025-12691

🗓️ 18 Nov 2025 09:27:39Reported by WordfenceType

Photonic Gallery Lightbox plugin is vulnerable to stored cross-site scripting via caption attribute up to version 3.21.

Reporter	Title	Published	Views	Family All 9
CNNVD	WordPress plugin Photonic Gallery & Lightbox for Flickr, SmugMug & Others 跨站脚本漏洞	18 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-12691 Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Attribute	18 Nov 202509:27	–	cvelist
EUVD	EUVD-2025-197960	18 Nov 202512:30	–	euvd
NVD	CVE-2025-12691	18 Nov 202510:15	–	nvd
Patchstack	WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Attribute vulnerability	17 Nov 202523:33	–	patchstack
Positive Technologies	PT-2025-47283	18 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-12691	19 Nov 202510:23	–	redhatcve
Vulnrichment	CVE-2025-12691 Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Attribute	18 Nov 202509:27	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)	26 Nov 202515:02	–	wordfence

Vulners

Node

sayontan photonic_gallery_&_lightbox_for_flickr,_smugmug_&_othersRange≤3.21wordpress

[
  {
    "vendor": "sayontan",
    "product": "Photonic Gallery & Lightbox for Flickr, SmugMug & Others",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.21",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/9f21f4a4-4b50-4396-8d94-26d68c0eb3a3
plugins	www.plugins.trac.wordpress.org/changeset

17 Jun 2026 08:32Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.16.4

EPSS0.00162

SSVC

CWE-79