Gallery and Lightbox
Gallery and Lightbox has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Gallery and Lightbox has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by SOPROBRO. Gallery and Lightbox is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.3.23.
CVE-2025-22797Gallery and Lightbox <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Gallery and Lightbox
Author
Oğulcan Özügenç
You can use this plugin to solve your Gallery and Lightbox problems. I have been working for a long time for this plugin to be usable on WordPress I have my own server and thats why I can create most efficient plugins. I am always looking at the logs and PHP warnings. Normally shared hosting users cant see these warnings. You can look to the “.php” files to understand how this plugin works. I recommend you all the 5 plugins that I have created. Supported languages: Türkçe English Deutsch Donations You can contact me for donations! Thanks in advance.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C