Grey Owl Lightbox
Grey Owl Lightbox has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Grey Owl Lightbox has a vendor fix available, so running the current release closes it.
All of these findings were reported by zakaria. Grey Owl Lightbox is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-11440Grey Owl Lightbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Grey Owl Lightbox
Author
greyowl0015
Responsive lightbox plugin for images, galleries, videos, HTML and AJAX content with JavaScript event support. About Plugin The “Grey Owl Lightbox” plugin is designed to display different content in the lightbox, For example: image, galleries, videos and other html content. The plugin is triggering JAVASCRIPT events to control the lightbox via the .JS file At the core of the plugin is the js library, which works with jQuery, each developer can use events for more features of this plugin. A list and examples of all events are on the documentation page. First view Open image in lightbox to open an image in a lightbox after clicking a button or a link, you need to add a class to the button, which will be used as a trigger in the JavaScript code Opens gallery in lightbox to open the gallery in a lightbox after clicking a button or link, you need to add a class to the button that will be used as a trigger in the JavaScript code, in the options add an object with links to images Opens video in lightbox to open a video in a lightbox after clicking a button or link, you need to add a class to the button that will be used as a trigger in the JavaScript code, in the options add a link to the video Opens HTML element from DOM in lightbox opens HTML elements in a lightbox, making them invisible beforehand, it is also possible to embed dynamic content into HTML AJAX callback opens AJAX requests elements in a lightbox
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C