CVE

CVE-2026-118438 — Firelight Lightbox [easy-fancybox] < 2.3.24

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-118438 Firelight Lightbox [easy-fancybox] < 2.3.24 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 2.3.24 2.3.24 2026-10-28 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.