Extension WordPress
Vulnérabilités ARI Fancy Lightbox – Popup for WordPress
Cette page rassemble les failles publiées pour ARI Fancy Lightbox – Popup for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de ARI Fancy Lightbox – Popup for WordPress
4 fiches
ARI Fancy Lightbox <= 1.4.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The ARI Fancy Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-1.4.0
1.4.1
05/09/2025
ARI Fancy Lightbox <= 1.3.17 – Authenticated (Author+) Stored Cross-Site Scripting
The ARI Fancy Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access…
*-1.3.17
1.3.18
25/09/2024
PDF.js < 4.2.67 – Arbitrary JavaScript Execution
PDF.js is vulnerable to Arbitrary JavaScript Execution in versions prior to 4.2.67. This is due to a missing type check when handling fonts. This makes it possible for authenticated attackers, with contributor-level or above permissions, to execute arbitrary…
*-1.3.14
1.3.15
20/05/2024
ARI Fancy Lightbox <= 1.3.8 – Reflected Cross-Site Scripting
The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
[*, 1.3.9)
1.3.9
17/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.