Grey Owl Lightbox

Grey Owl Lightbox has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Grey Owl Lightbox has a vendor fix available, so running the current release closes it.

All of these findings were reported by zakaria. Grey Owl Lightbox is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Grey Owl Lightbox vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-11440

Grey Owl Lightbox <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Grey Owl Lightbox banner
Latestv2.0.0

Grey Owl Lightbox

greyowl0015

Author

greyowl0015

5.0(2)
100/100
Last Updated
2025-08-30 (1y ago)
Active Installs
50+
Downloads
8,736
Requires WP
4.1+
Requires PHP
7.0+
Tested up to
WP 6.8.8
Created
2019-02-25 (8y ago)

Responsive lightbox plugin for images, galleries, videos, HTML and AJAX content with JavaScript event support. About Plugin The “Grey Owl Lightbox” plugin is designed to display different content in the lightbox, For example: image, galleries, videos and other html content. The plugin is triggering JAVASCRIPT events to control the lightbox via the .JS file At the core of the plugin is the js library, which works with jQuery, each developer can use events for more features of this plugin. A list and examples of all events are on the documentation page. First view Open image in lightbox to open an image in a lightbox after clicking a button or a link, you need to add a class to the button, which will be used as a trigger in the JavaScript code Opens gallery in lightbox to open the gallery in a lightbox after clicking a button or link, you need to add a class to the button that will be used as a trigger in the JavaScript code, in the options add an object with links to images Opens video in lightbox to open a video in a lightbox after clicking a button or link, you need to add a class to the button that will be used as a trigger in the JavaScript code, in the options add a link to the video Opens HTML element from DOM in lightbox opens HTML elements in a lightbox, making them invisible beforehand, it is also possible to embed dynamic content into HTML AJAX callback opens AJAX requests elements in a lightbox

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C