CVE-2023-0441

The CVE-2023-0441 entry concerns the Gallery Blocks with Lightbox WordPress plugin prior to 3.0.8. An AJAX endpoint is accessible to any authenticated user (e.g., subscriber); the callback can perform actions including reading/updating WordPress options, potentially enabling registration with a d...

CVE-2021-24667

CVE-2021-24667 affects the WordPress plugin Simply Gallery Blocks with Lightbox (versions 2.2.0 and below; addressed in 2.2.1). The root cause is insufficient validation/escaping of image metadata parameters in the Lightbox feature, allowing an authenticated user with low privileges to execute st...