Skip to content

CVE record · 1 source

CVE-2026-109234

CVSS 7.2

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all…

Vendor: Tigroumeow
Product: Meow Lightbox
CVSS v3.1: 7.2 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-79
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 28h ago

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all…

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)' parameter in all versions up to, and including, 5.6.4 due to insufficient input sanitization and…

CVSS 7.2 CVE-2026-109234 Tigroumeow