CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-10-31
WordPress Meow Lightbox Plugin Stored Cross-Site Scripting (Stored XSS) Vulnerability (CVE-2026-109234)
[Affected Scope] All versions of Meow Lightbox plugin for WordPress up to, and including, 5.6.4
[Impact] Unauthenticated attackers can inject arbitrary web scripts via the 'post_content' parameter, executing malicious JavaScript in the context of any user viewing the affected page under specific configurations
[Mitigation] Immediately update the Meow Lightbox plugin to the latest secure version (5.6.5 or higher) and apply temporary configuration workarounds if patching is delayed