Medium · 5.9 CVE-2023-24004 EUVD-2023-28068GHSA-j63j-7cpc-wjhg

WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Published Apr 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions.

Vendor	Product	Affected	Fixed
WPdevart	Image and Video Lightbox, Image PopUp	≤ 2.1.5	—