Lity – Responsive Lightboxes Security & Risk Analysis

wordpress.org/plugins/lity-responsive-lightboxes

A lightweight, accessible and responsive WordPress lightbox plugin.

50 active installs v1.0.0 PHP 5.6+ WP 5.0+ Updated Jul 9, 2022
captionslightboxresponsive
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Lity – Responsive Lightboxes Safe to Use in 2026?

Generally Safe

Score 85/100

Lity – Responsive Lightboxes has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The lity-responsive-lightboxes plugin v1.0.0 exhibits a strong security posture with an absence of known vulnerabilities and generally good coding practices. The static analysis reveals a very limited attack surface, with no apparent AJAX handlers, REST API routes, shortcodes, or cron events exposed without authentication. Furthermore, the vast majority of SQL queries are properly prepared, and output escaping is consistently applied, indicating careful development. The plugin also demonstrates good security awareness with the presence of nonce and capability checks.

Key Concerns

  • Presence of unserialize function without clear context
Vulnerabilities
None known

Lity – Responsive Lightboxes Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Lity – Responsive Lightboxes Code Analysis

Dangerous Functions
1
Raw SQL Queries
5
63 prepared
Unescaped Output
3
127 escaped
Nonce Checks
4
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$schedule = unserialize( $data->schedule ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.seincludes\action-scheduler\classes\data-stores\ActionScheduler_DBStore.php:219

SQL Query Safety

93% prepared68 total queries

Output Escaping

98% escaped130 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<ActionScheduler_Abstract_ListTable> (includes\action-scheduler\classes\abstracts\ActionScheduler_Abstract_ListTable.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Lity – Responsive Lightboxes Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 92
actionplugins_loadedincludes\action-scheduler\action-scheduler.php:33
actionplugins_loadedincludes\action-scheduler\action-scheduler.php:36
actioninitincludes\action-scheduler\classes\abstracts\ActionScheduler.php:152
actioninitincludes\action-scheduler\classes\abstracts\ActionScheduler.php:153
actioninitincludes\action-scheduler\classes\abstracts\ActionScheduler.php:154
actioninitincludes\action-scheduler\classes\abstracts\ActionScheduler.php:155
actionaction_scheduler/migration_completeincludes\action-scheduler\classes\abstracts\ActionScheduler.php:184
actionaction_scheduler_canceled_actionincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:50
actionaction_scheduler_begin_executeincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:51
actionaction_scheduler_after_executeincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:52
actionaction_scheduler_failed_executionincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:53
actionaction_scheduler_failed_actionincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:54
actionaction_scheduler_unexpected_shutdownincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:55
actionaction_scheduler_reset_actionincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:56
actionaction_scheduler_execution_ignoredincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:57
actionaction_scheduler_failed_fetch_actionincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:58
actionaction_scheduler_failed_to_schedule_next_instanceincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:59
actionaction_scheduler_bulk_cancel_actionsincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:60
actionaction_scheduler_stored_actionincludes\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:64
actionwoocommerce_admin_status_content_action-schedulerincludes\action-scheduler\classes\ActionScheduler_AdminView.php:37
actionwoocommerce_system_status_reportincludes\action-scheduler\classes\ActionScheduler_AdminView.php:38
filterwoocommerce_admin_status_tabsincludes\action-scheduler\classes\ActionScheduler_AdminView.php:39
actionadmin_menuincludes\action-scheduler\classes\ActionScheduler_AdminView.php:42
actioncurrent_screenincludes\action-scheduler\classes\ActionScheduler_AdminView.php:44
filteraction_scheduler_store_classincludes\action-scheduler\classes\ActionScheduler_DataController.php:167
filteraction_scheduler_logger_classincludes\action-scheduler\classes\ActionScheduler_DataController.php:168
actiondeactivate_pluginincludes\action-scheduler\classes\ActionScheduler_DataController.php:169
actionaction_scheduler/progress_tickincludes\action-scheduler\classes\ActionScheduler_DataController.php:174
actionshutdownincludes\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:19
actionaction_scheduler_before_executeincludes\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:20
actionaction_scheduler_after_executeincludes\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:21
actionaction_scheduler_execution_ignoredincludes\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:22
actionaction_scheduler_failed_executionincludes\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:23
actionaction_scheduler/created_tableincludes\action-scheduler\classes\ActionScheduler_ListTable.php:534
filtercron_schedulesincludes\action-scheduler\classes\ActionScheduler_QueueRunner.php:51
actionshutdownincludes\action-scheduler\classes\ActionScheduler_QueueRunner.php:74
actionpre_get_commentsincludes\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:44
actionwp_count_commentsincludes\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:45
actioncomment_feed_whereincludes\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:46
actionload-tools_page_action-schedulerincludes\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:49
actionload-woocommerce_page_wc-statusincludes\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:50
actionadmin_noticesincludes\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:91
actionaction_scheduler_deleted_actionincludes\action-scheduler\classes\data-stores\ActionScheduler_DBLogger.php:112
actionaction_scheduler/created_tableincludes\action-scheduler\classes\data-stores\ActionScheduler_HybridStore.php:56
filtercomments_clausesincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:102
actionaction_scheduler_before_process_queueincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:219
actionaction_scheduler_after_process_queueincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:220
actionpre_get_commentsincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:224
actionwp_count_commentsincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:225
actioncomment_feed_whereincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:226
actionwp_insert_commentincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:229
actionwp_set_comment_statusincludes\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:230
filterwp_insert_post_dataincludes\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:81
filterpre_wp_unique_post_slugincludes\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:82
filterpre_wp_unique_post_slugincludes\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:518
filterwp_insert_post_dataincludes\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:976
filterpre_wp_unique_post_slugincludes\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:977
filteraction_scheduler_migration_dependencies_metincludes\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:1064
actionadmin_noticesincludes\action-scheduler\classes\migration\Controller.php:155
filteraction_scheduler_store_classincludes\action-scheduler\classes\migration\Controller.php:169
filteraction_scheduler_logger_classincludes\action-scheduler\classes\migration\Controller.php:170
actioninitincludes\action-scheduler\classes\migration\Controller.php:171
actionwp_loadedincludes\action-scheduler\classes\migration\Controller.php:172
actionload-tools_page_action-schedulerincludes\action-scheduler\classes\migration\Controller.php:175
actionload-woocommerce_page_wc-statusincludes\action-scheduler\classes\migration\Controller.php:176
actionaction_scheduler_before_schema_updateincludes\action-scheduler\classes\schema\ActionScheduler_LoggerSchema.php:28
actionaction_scheduler_before_schema_updateincludes\action-scheduler\classes\schema\ActionScheduler_StoreSchema.php:33
actionaction_scheduler_before_executeincludes\action-scheduler\classes\WP_CLI\ActionScheduler_WPCLI_QueueRunner.php:79
actionaction_scheduler_after_executeincludes\action-scheduler\classes\WP_CLI\ActionScheduler_WPCLI_QueueRunner.php:80
actionaction_scheduler_failed_executionincludes\action-scheduler\classes\WP_CLI\ActionScheduler_WPCLI_QueueRunner.php:81
actionaction_scheduler/migrate_action_dry_runincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:126
actionaction_scheduler/no_action_to_migrateincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:129
actionaction_scheduler/migrate_action_failedincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:132
actionaction_scheduler/migrate_action_incompleteincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:135
actionaction_scheduler/migrated_actionincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:138
actionaction_scheduler/migration_batch_startingincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:141
actionaction_scheduler/migration_batch_completeincludes\action-scheduler\classes\WP_CLI\Migration_Command.php:144
filterremovable_query_argsincludes\class-settings.php:42
actionadmin_initincludes\class-settings.php:44
actionadmin_initincludes\class-settings.php:45
actionadmin_initincludes\class-settings.php:47
actionadmin_menuincludes\class-settings.php:49
filterlity_excluded_element_selectorsincludes\compat\class-woocommerce.php:31
filterlity_excluded_element_selectorsincludes\compat\class-woocommerce.php:33
actionwp_enqueue_scriptslity.php:105
actionadmin_initlity.php:107
actionlity_generate_mediality.php:109
actionattachment_updatedlity.php:111
filterwp_generate_attachment_metadatality.php:113
actiondeleted_postlity.php:115
actionadmin_noticeslity.php:117
filterlity_excluded_element_selectorslity.php:119
Maintenance & Trust

Lity – Responsive Lightboxes Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedJul 9, 2022
PHP min version5.6
Downloads2K

Community Trust

Rating100/100
Number of ratings2
Active installs50
Developer Profile

Lity – Responsive Lightboxes Developer Profile

Evan Herman

15 plugins · 136K total installs

68
trust score
Avg Security Score
84/100
Avg Patch Time
375 days
View full developer profile
Detection Fingerprints

How We Detect Lity – Responsive Lightboxes

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/lity-responsive-lightboxes/assets/css/lity/lity.css/wp-content/plugins/lity-responsive-lightboxes/assets/css/lity-styles.css/wp-content/plugins/lity-responsive-lightboxes/assets/js/lity/lity.js/wp-content/plugins/lity-responsive-lightboxes/assets/js/lity-script.js
Script Paths
/wp-content/plugins/lity-responsive-lightboxes/assets/js/lity/lity.js/wp-content/plugins/lity-responsive-lightboxes/assets/js/lity-script.js
Version Parameters
lity-responsive-lightboxes/assets/css/lity/lity.css?ver=lity-responsive-lightboxes/assets/css/lity-styles.css?ver=lity-responsive-lightboxes/assets/js/lity/lity.js?ver=lity-responsive-lightboxes/assets/js/lity-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
lity-responsive-lightboxes
Data Attributes
data-lity
JS Globals
lity
FAQ

Frequently Asked Questions about Lity – Responsive Lightboxes