Album and Image Gallery Plus Lightbox vulnerabilities

2 known vulnerabilities in Album and Image Gallery Plus Lightbox from Essentialplugin. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Accordion and Accordion Slider: Embedded Malicious Code

  CVE-2026-6443Apr 17, 2026Essentialplugin

  All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for

• 7.3 High severity

  Album and Image Gallery Plus Lightbox: Improper Control of Generation of Code

  CVE-2024-4194Jun 6, 2024Essentialplugin

  The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0. This is due to the software allowing users to execute an action that does not properly validate a value