CVE-2026-109234

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 5.6.4 . The root cause is insufficient input sanitization and output escaping of the post_content (bbPress reply body) parameter. An unauthenticated attacker can inject arbitr...