Meow Lightbox vulnerabilities

1 known vulnerability in Meow Lightbox from Tigroumeow. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Meow Lightbox: Improper Neutralization of Input During Web Page Generation

  CVE-2026-109234Oct 31, 2026Tigroumeow

  The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and output escaping. This makes it poss