Vulnerabilities / FancyBox for WordPress
FancyBox for WordPress vulnerabilities
Advisories WPSec published for FancyBox for WordPress. Other sources may list more. Its attack surface: FancyBox for WordPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-10 | WPSEC-2026-2802 | FancyBox for WordPress <= 3.4.2 - Unauthenticated Stored Cross-Site Scripting via Comment Link URLs | High 7.2 | 3.4.3 |
| 2026-11-10 | WPSEC-2026-2801 | FancyBox for WordPress <= 3.4.2 - Unauthenticated Regular Expression Denial of Service via Comment Links | Medium 5.3 | 3.4.3 |
| 2026-11-10 | WPSEC-2026-2800 | FancyBox for WordPress <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link data-* Attributes | Medium 6.4 | 3.4.3 |
License: CC BY 4.0