Meow Lightbox

Meow Lightbox has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Meow Lightbox has a vendor fix available, so running the current release closes it.

All of these findings were reported by crow. Meow Lightbox is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Meow Lightbox vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-107756

Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name

Read the full analysis

Vulnerability Records

1 records
Meow Lightbox banner
Latestv5.6.3

Meow Lightbox

Jordy Meow

Author

Jordy Meow

4.9(188)
98/100
Last Updated
2026-10-10 (10d ago)
Active Installs
10,000+
Downloads
455,824
Requires WP
6.0+
Requires PHP
8.1+
Tested up to
WP 7.1.3
Created
2016-08-23 (10y ago)

Meow Lightbox is the photographer’s choice for WordPress. Built from scratch for speed and elegance, it showcases your images beautifully while displaying EXIF data, GPS maps, and metadata—all in a clean, responsive interface. Stop settling for bloated lightboxes that slow down your site! 😘 Meow Lightbox focuses on what photographers actually need: Beautiful Presentation and Technical Details. Choose between our custom engine or PhotoSwipe, both optimized for performance. Check out our official site to see it in action. Core Features 📸 Responsive Design Looks stunning on mobile, tablets, and desktop. Images adapt to screen size for optimal viewing on any device. 🎨 Dual Lightbox Engines Switch between our custom Default Engine or PhotoSwipe. Both are optimized for speed and elegance, with full EXIF support. 📊 EXIF Data Display Show camera settings, lens info, shutter speed, aperture, ISO, and capture date—perfect for photography portfolios. 🗺️ GPS & Maps Display shooting location with Google Maps or Leaflet integration when GPS data is available in your images. 📸 Photography Features Your photos deserve to shine. Meow Lightbox displays them beautifully with all the technical details photographers love. Image Information: Camera and Lens Shutter Speed & Aperture ISO and Focal Length Capture Date & Time Keywords and Metadata GPS Coordinates Display Options: Responsive layout for all devices Fullscreen mode Zoom and pan on images Keyboard navigation Touch gestures on mobile Gallery Support: Works with Meow Gallery Compatible with WordPress core galleries Supports WooCommerce product images Separate galleries mode 🎯 Lightbox Engines Choose the engine that fits your needs best. Both are fast, elegant, and fully featured. Default Engine: Custom-built for photographers Smooth zoom animations Clean, minimal interface Optimized for EXIF display Glass morphism design PhotoSwipe: Industry-standard lightbox Touch-optimized gestures Smooth transitions Full EXIF integration Modern UI with caption support Pro Features Deep-Linking: Share URLs that open specific images Slideshow: Auto-play through your gallery Social Sharing: Let visitors share your photos Animation: Beautiful open/close transitions Google Maps: Display shooting locations Priority Support Why Meow Lightbox? Performance First No bloat, no unnecessary features. Just clean, fast code that showcases your photos beautifully. Built for Photographers EXIF data, GPS maps, and metadata display—everything photographers need in one elegant package. Flexible Works with any gallery plugin or WordPress core galleries. Choose your preferred lightbox engine. Developer Friendly Clean APIs, WordPress hooks, and filters. Extend it your way. Constantly Evolving Regular updates based on real photographer feedback. We listen, we improve.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C