FCP Lightest Lightbox Security & Risk Analysis

wordpress.org/plugins/fcp-lightest-lightbox

Super lightweight Lighbox for WordPress

100 active installs v1.4.2 PHP 7.0.0+ WP 5.7+ Updated Unknown
galleryimageslightboxphotography
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is FCP Lightest Lightbox Safe to Use in 2026?

Generally Safe

Score 100/100

FCP Lightest Lightbox has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

Based on the static analysis and vulnerability history, the 'fcp-lightest-lightbox' plugin version 1.4.2 exhibits an exceptionally strong security posture. The code analysis reveals no identified attack surface points, such as AJAX handlers, REST API routes, shortcodes, or cron events, that are exposed without authentication or proper permission checks. Furthermore, the plugin avoids the use of dangerous functions and performs all SQL queries using prepared statements, indicating robust data handling practices. All identified output is properly escaped, and there are no file operations or external HTTP requests, which are common vectors for vulnerabilities. The absence of any recorded CVEs, past or present, further bolsters its security reputation, suggesting a proactive approach to security by the developers or a lack of exploitable flaws discovered to date. While the lack of nonce checks is noted, given the absence of any attack surface, this is not currently a concern. The plugin's strengths lie in its minimal attack surface, secure coding practices for database interactions and output, and a clean vulnerability history.

Vulnerabilities
None known

FCP Lightest Lightbox Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

FCP Lightest Lightbox Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped2 total outputs
Attack Surface

FCP Lightest Lightbox Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionwp_enqueue_scriptsfcp-lightbox.php:23
filterscript_loader_tagfcp-lightbox.php:37
Maintenance & Trust

FCP Lightest Lightbox Maintenance & Trust

Maintenance Signals

WordPress version tested6.4.8
Last updatedUnknown
PHP min version7.0.0
Downloads3K

Community Trust

Rating100/100
Number of ratings2
Active installs100
Developer Profile

FCP Lightest Lightbox Developer Profile

FirmCatalyst

4 plugins · 120 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect FCP Lightest Lightbox

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fcp-lightest-lightbox/loader.min.js/wp-content/plugins/fcp-lightest-lightbox/loader.js
Script Paths
/wp-content/plugins/fcp-lightest-lightbox/loader.min.js/wp-content/plugins/fcp-lightest-lightbox/loader.js
Version Parameters
fcp-lightest-lightbox/loader.min.js?ver=fcp-lightest-lightbox/loader.js?ver=

HTML / DOM Fingerprints

Data Attributes
a[href$=".jpg"]a[href$=".jpeg"]a[href$=".png"]
JS Globals
window.fcp_lightbox
FAQ

Frequently Asked Questions about FCP Lightest Lightbox