CVE-2026-116395 WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins LightBox Block lightbox-block allows Stored XSS.This issue affects LightBox Block: from n/a through 1.2.0...

CVE-2026-116395

The bPlugins LightBox Block WordPress plugin (versions n/a through 1.2.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw is caused by the Improper Neutralization of Input During Web Page Generation within the lightbox-block component. An attacker with low privileges...

WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin LightBox Block versions = 1.2.0...

WordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin LightBox Block versions = 1.1.30...

CVE-2025-54051

CVE-2025-54051 describes a Stored XSS in the LightBox Block (Gutenberg block) for WordPress. Affected: LightBox Block versions up to 1.1.30. Root cause: Improper neutralization of input during web page generation. Impact: Stored cross-site scripting as indicated by the vulnerability entry. Remedi...