https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5537.htmlhttps://patchthecve.com/cve/CVE-2025-5537.htmlWed, 17 Jun 2026 09:48:07 +0000MEDIUM 6.4: The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alternative texts in all versions up to, and including, 2.7.34 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackehttps://patchthecve.com/cve/CVE-2024-5668.htmlhttps://patchthecve.com/cve/CVE-2024-5668.htmlWed, 17 Jun 2026 08:16:23 +0000MEDIUM 6.4: The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 2.7.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ithttps://patchthecve.com/cve/CVE-2024-3276.htmlhttps://patchthecve.com/cve/CVE-2024-3276.htmlWed, 17 Jun 2026 07:43:42 +0000MEDIUM 4.8: The Lightbox & Modal Popup WordPress Plugin WordPress plugin before 2.7.28, foobox-image-lightbox-premium WordPress plugin before 2.7.28 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when t