PLUGIN SECURITY

Is Lightbox Photoswipe safe?

Integration of PhotoSwipe (http://photoswipe.com) for WordPress.

What this plugin does

  • Slug: lightbox-photoswipe
  • Author: Arno Welzel
  • 20000+ active installs
  • 98/100 rating (115 reviews on wordpress.org)
  • 1059318 all-time downloads
  • On WordPress.org since 2017-11-02

attachmentsgalleryimageslightboxphotoswipe

Maintenance status

  • Latest known version: 5.10.1
  • Last updated: 2026-08-13 7:29am GMT
  • Tested up to WordPress: 7.1
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Lightbox Photoswipe. Reported between 2026 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-14833 Lightbox with PhotoSwipe [lightbox-photoswipe] < 5.9.0 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 5.9.0 5.9.0 2026-07-13 ✓ fixed in latest

How to fix it

Keep Lightbox Photoswipe updated — 5.10.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.