Skip to content
Noroxi

firelightwp records

3 published records for vendor firelightwp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

3 records
  • CVE-2025-3597
    23Monitor

    Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS

    MediumCVSS 5.9No exploitEPSS 0%

    firelightwp · firelight lightboxMay 12, 2025

  • CVE-2025-5035
    21Monitor

    Firelight Lightbox < 2.3.16 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    firelightwp · firelight lightboxJun 27, 2025

  • WordPress Firelight Lightbox plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    firelightwp · firelight lightboxOct 28, 2024