Medium · 6.5 CVE-2026-66434 EUVD-2026-49243GHSA-94w5-q7f9-fhrx

WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Description

Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.

Vendor	Product	Affected	Fixed
Sayontan Sinha	Photonic Gallery & Lightbox for Flickr, SmugMug & Others	≤ 3.33	—