All In One Lightbox – show any media in beautiful popups

All In One Lightbox – show any media in beautiful popups has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for All In One Lightbox – show any media in beautiful popups has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. All In One Lightbox – show any media in beautiful popups is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all All In One Lightbox – show any media in beautiful popups vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-116395

All In One Lightbox – show any media in beautiful popups <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
All In One Lightbox – show any media in beautiful popups banner
Latestv1.2.2

All In One Lightbox – show any media in beautiful popups

bPlugins

Author

bPlugins

5.0(7)
100/100
Last Updated
2026-10-27 (1d ago)
Active Installs
3,000+
Downloads
80,849
Requires WP
6.5+
Requires PHP
7.1+
Tested up to
WP 7.1.3
Created
2022-10-26 (4y ago)

Create Responsive Lightbox Popups and Galleries for Images, Audio, Video, PDFs, Iframes, and Custom Content Directly in the WordPress Block Editor. Lightbox Block | Documentation | Pricing | Support | Demo Lightbox Block is a Gutenberg plugin that helps you display different types of media inside a popup. You can create image galleries, audio playlists, video showcases, or show any custom content in a lightbox. The block is simple to use and does not require any coding knowledge. The plugin is fully responsive, so your popups look good on desktops, tablets, and mobile devices. You can customize layouts, choose from different styles, and adjust settings to match your design. It is useful for portfolios, tutorials, product galleries, media libraries, and any website where you want to highlight content in a clean and interactive way. Key Features – Free Version Five Lightbox Types – Choose from Gallery, Button, Audio, Video, and Content lightboxes to display different kinds of media. Gallery Content Support – Build galleries with images, audio, video, or custom content blocks. Multiple Blocks on a Page – Add different lightbox types within the same page without conflicts. Button Lightbox – Trigger popups with customizable buttons, allowing flexible placement anywhere in your content. Embed External Media – Supports YouTube, Vimeo, and self-hosted videos for quick video playback. Mobile Responsive – Popups automatically adapt to all screen sizes for a seamless experience on phones and tablets. Slideshow & Fullscreen Modes – Present galleries as interactive slideshows or allow users to expand media fullscreen. Captions Support – Add titles or descriptions to each popup for context. Independent Galleries – Display multiple galleries on one site, each working separately. Layout Options – Choose between the default grid or the Masonry layout for creative displays. Custom Layout Controls – Adjust row/column gaps and layout spacing for better design control. Lazy Load (New) – Gallery images load only when visitors scroll near them, with your own load distance and delay. Works for every media type. Responsive Images & Retina (New) – Each screen gets the right image size through srcset, sharp on 2x/3x screens, with the thumbnail size you choose. WebP Images (New) – Convert gallery images to WebP on your own server (usually 25–40% smaller). No external service or API key; original files are kept. Loaded Effect, Placeholder & Loading Icon (New) – Fade, zoom, slide or blur images in, show a color box or a spinner while they load. Crop Position (New) – Pick which part of the image stays visible when it is cropped to the grid box. Lazy-load Plugin Compatibility (New) – Works alongside WP Rocket, LiteSpeed, Smush, Jetpack and others, with a notice when one of them is active. LightBox Block Pro – Unlock Premium Features The Pro version adds more flexibility and advanced controls for managing video playback and customization: What’s New in the Pro Version? Shortcode Support – Insert lightboxes anywhere on your site, even outside Gutenberg, using shortcodes. Extended Media Types – Go beyond basic content by embedding PDFs, iframes, YouTube videos, and custom HTML alongside images, audio, and video. Custom Overlay & Captions – Change caption style and overlay colors to match your site’s branding. Autoplay Slideshows – Automatically start popup slideshows for a smooth presentation. Mouse-Wheel Navigation – Let users scroll with their mouse wheel to zoom or move between slides. Advanced Slide Effects – Enhance transitions with Slide, CrossFade, Classic, or Default effects. Topbar Controls – Show slide counts and allow zooming, rotating (clockwise/counter-clockwise), flipping, and fullscreen toggle directly in the popup topbar. Toolbar Actions – Add sharing (Facebook, Twitter), downloads, slideshow controls, thumbnails, and close buttons inside the popup. Thumbnail Previews – Display gallery thumbnails in Classic or Modern styles for easy navigation. Advanced Media Player Controls – Full audio/video control panel including play/pause, restart, rewind, fast-forward, progress bar, duration, mute, volume, PiP, Airplay, settings, download, and fullscreen. Multiple Audio Players – Choose from four different audio player designs to suit your style. Hover Effects – Add engaging hover animations such as Zoom, Rotate, or Shine for gallery items. Gallery Styling Options – Customize border radius and choose from five aspect ratios (Landscape, Square, Horizontal, Vertical, Portrait). Color & Size Controls – Personalize the modal background, close icon colors, and adjust modal/icon sizes per device. Slider Layout – Use a slider format for galleries instead of grid or masonry when needed. Global Lazy Load Settings (New) – Set lazy load once for every gallery from Lightbox → Settings, with a live preview; any gallery can still use its own settings. 10 Loading Icons + Your Own (New) – Material, iOS lines, ripple, grid and more, or upload a GIF/SVG/PNG loader, with icon size and color. Blur Placeholder / LQIP (New) – A tiny blurred preview fades into the sharp image. One-click WebP Conversion (New) – Convert every gallery image at once with your own quality setting. Pagination (New) – Load More button, Infinite Scroll or Numbered Pages for big galleries, with items per page, a “Showing X of Y” counter and global or per-gallery button style. Try the Pro Version – Unlock all premium features today! How to Use Lightbox Block – Quick Start Guide Follow these steps: Step-by-Step Setup Install and activate Lightbox Block. In the Gutenberg editor, add a Lightbox Block from the Widgets section. Select your lightbox type (Gallery, Button, Audio, Video, Content). Upload media or embed from YouTube/Vimeo. Adjust layout, spacing, and display options from the block sidebar. (Optional) Upgrade to Pro for advanced customization, shortcode support, and extended media types. Publish your post or page and enjoy your new interactive lightbox! That’s it! Live Demo | Try the Pro Version Make Your Galleries Load Fast – Lazy Load Tutorial See how Lazy Load, WebP, Thumbnail Size, Loaded Effects and Pagination make a 30-photo gallery open with 0.46 MB instead of 11.9 MB. Feedback Did you Like that plugin? Hate it? Want a new feature? Send me some feedback Check out our other WordPress Plugins Html5 Video Player – Best video player plugin for WordPress. HTML5 Audio Player – Best audio player plugin for WordPress. PDF Poster – A fully-featured PDF Viewer Plugin for WordPress. StreamCast – A fully-featured Radio Player Plugin for WordPress. 3D Viewer – Display interactive 3D models on the webs. Source Code You can find the source code, report bugs, and contribute to the development of this plugin on our GitHub repository: Lightbox Block on GitHub Third-party Libraries @fancyapps/ui (Fancybox & Carousel) Used for: Lightbox popup, carousel slider, and thumbnail navigation Version: 5.0.36 Source: https://fancyapps.com/ License: Fancyapps UI License License URI: https://fancyapps.com/pricing/ Font Awesome Free Used for: Icons throughout the plugin interface Version: 6.4.2 Source: https://fontawesome.com/ License: Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License License URI: https://fontawesome.com/license/free Plyr Used for: Audio and video media player controls Version: 3.x Source: https://plyr.io/ License: MIT License URI: https://opensource.org/licenses/MIT bpl-tools Source / GitHub: https://github.com/bPlugins/bpl-tools License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Shared utility library providing admin dashboard components and common Gutenberg editor controls. External Services: The library may connect to bPlugins, WordPress.org, and Freemius services for product data and checkout functionality. See full details: https://github.com/bPlugins/bpl-tools#external-requests–why-they-are-made Freemius Lite SDK Source: https://bplugins.com/ GitHub: https://github.com/bPlugins/freemius-lite-sdk License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Provides an opt-in consent form for usage tracking and analytics to help improve the plugin. No data is sent before explicit user consent. External Services: Communicates with api.bplugins.com (activation events) and wp.freemius.com (opt-in processing) only after user opt-in. See bPlugins Privacy Policy and Freemius Privacy Policy.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C