Skip to content
OpenAdvisories

Vendor

arevico

3 known vulnerabilities.

Products

WP Simple Redirect 1 Multi Functional Flexi Lightbox 1 WP Tactical Popup 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-3347

    Multi Functional Flexi Lightbox <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via 'message' Parameter

    The Multi Functional Flexi Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `arv_lb[message]` parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This is due to the …

    arevico Multi Functional Flexi Lightbox Web / CMS