CVE-2025-3745

creationtimestamp| type| source ---|---|--- 2025-06-30 06:58:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19905 2025-06-30 07:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lssnl2xyet2s...

CVE-2025-3745 WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks...

CVE-2025-3745

CVE-2025-3745 affects the WordPress plugin WP Lightbox 2, versions prior to 3.0.6.8. Root cause: the title attribute of links is not properly sanitized before use, enabling unauthenticated stored XSS. Impact is as described in public sources; remediation: upgrade to 3.0.6.8 or later (no exploit d...