[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLPU_kJzwFNZD6TBIrwABQtrZflhscZK1L2WWXgJYY3c":3,"$f8dvjYRBS4bACIC5uf0cC0C8-usdVDRqU79vk3uugKmU":224,"$ftG26Z05TSBAXgwrnHyy_jYTNZVrF35nYWFn8PMBlBjY":229},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":50,"crawl_stats":38,"alternatives":58,"analysis":154,"fingerprints":197},"simple-colorbox","Simple Colorbox","1.6.1","Ryan Hellyer","https:\u002F\u002Fprofiles.wordpress.org\u002Fryanhellyer\u002F","\u003Cp>Adds a very simple Colorbox to your linked images. This plugin is intended as an easy to use alternative to other lightbox \u002F Colorbox\u003Cbr \u002F>\nalternatives. Unlike most other plugins with similar functionality, this one does not have any settings or requirements whatsoever,\u003Cbr \u002F>\nsimple install, activate and yer done 🙂\u003C\u002Fp>\n\u003Cp>\u003Cstrong>More information can be found on the \u003Ca href=\"https:\u002F\u002Fgeek.hellyer.kiwi\u002Fproducts\u002Fsimple-colorbox\u002F\" rel=\"nofollow ugc\">Simple Colorbox plugin page\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Thanks to the following (in no particular order) for help with the development of this plugin:\u003Cbr \u002F>\n* \u003Ca href=\"http:\u002F\u002Ft.co\u002FhCpn8iLgFo\" rel=\"nofollow ugc\">Milan Dinić\u003C\u002Fa> – Added extensive upgrade patch for increasing extensibility\u003Cbr \u002F>\n* \u003Ca href=\"http:\u002F\u002Farnsteinlarsen.no\u002F\" rel=\"nofollow ugc\">Arnstein Larsen\u003C\u002Fa> – Motivated me to add slideshow support\u003Cbr \u002F>\n* \u003Ca href=\"http:\u002F\u002Futkar.sh\u002F\" rel=\"nofollow ugc\">Utkarsh\u003C\u002Fa> – Assistance with jQuery bug\u003Cbr \u002F>\n* \u003Ca href=\"http:\u002F\u002Fronalfy.com\u002F\" rel=\"nofollow ugc\">Ronalfy\u003C\u002Fa> – Suggested I use Colorbox\u003C\u002Fp>\n","Description: Adds a very simple Colorbox to your linked images.",1000,40991,96,12,"2017-11-28T19:15:00.000Z","4.4.34","3.9","",[20,21,22,23,24],"colorbox","hover","layover","lightbox","simple","https:\u002F\u002Fgeek.hellyer.kiwi\u002Fproducts\u002Fsimple-colorbox\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.6.1.zip",63,1,"2025-09-26 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":38,"patch_diff_files":47,"patch_trac_url":38,"research_status":38,"research_verified":48,"research_rounds_completed":49,"research_plan":38,"research_summary":38,"research_vulnerable_code":38,"research_fix_diff":38,"research_exploit_outline":38,"research_model_used":38,"research_started_at":38,"research_completed_at":38,"research_error":38,"poc_status":38,"poc_video_id":38,"poc_summary":38,"poc_steps":38,"poc_tested_at":38,"poc_wp_version":38,"poc_php_version":38,"poc_playwright_script":38,"poc_exploit_code":38,"poc_has_trace":48,"poc_model_used":38,"poc_verification_depth":38},"CVE-2025-60124","simple-colorbox-authenticated-contributor-stored-cross-site-scripting","Simple Colorbox \u003C= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Simple Colorbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.6.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-09-29 21:18:50",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0c79eb10-2f4f-4d02-ad73-e74477afc947?source=api-prod",[],false,0,{"slug":51,"display_name":7,"profile_url":8,"plugin_count":52,"total_installs":53,"avg_security_score":54,"avg_patch_time_days":55,"trust_score":56,"computed_at":57},"ryanhellyer",16,97300,85,30,84,"2026-05-19T21:17:00.355Z",[59,83,102,122,140],{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":18,"tags":74,"homepage":78,"download_link":79,"security_score":80,"vuln_count":81,"unpatched_count":49,"last_vuln_date":82,"fetched_at":30},"wp-colorbox","WP Colorbox","1.1.6","Noor Alam","https:\u002F\u002Fprofiles.wordpress.org\u002Fnaa986\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-colorbox-plugin\u002F\" rel=\"nofollow ugc\">WP Colorbox\u003C\u002Fa> plugin is a simple lightbox tool for WordPress. It allows users to pop up content in lightbox using the popular jQuery ColorBox library. They can also view the larger version of a particular media file without leaving the page.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F2osxJcPTS1E?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Beautiful lightbox popup style\u003C\u002Fli>\n\u003Cli>Flexiblity of creating your own lightbox link\u003C\u002Fli>\n\u003Cli>Pop up custom\u002FHTML content in lightbox\u003C\u002Fli>\n\u003Cli>Trigger lightbox from either a text\u002Fimage link\u003C\u002Fli>\n\u003Cli>Add lightbox to a YouTube or Vimeo video link\u003C\u002Fli>\n\u003Cli>Enable lightbox functionality on your site which supports modern browsers\u003C\u002Fli>\n\u003Cli>Use a simple shortcode to pop up a media file in lightbox\u003C\u002Fli>\n\u003Cli>Apply lightbox effect on images inserted into WordPress post\u002Fpage\u003C\u002Fli>\n\u003Cli>Open external page in lightbox using iframe\u003C\u002Fli>\n\u003Cli>Responsive lightbox popup which works on mobile devices. Also it fits perfectly on smaller screens.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How to Use WP Colorbox\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Pop up image in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Create a new post\u002Fpage and use the following shortcode to create a text\u002Fimage link which will trigger lightbox once clicked:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" type=\"image\" hyperlink=\"click here to pop up image\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>here, url is the link to the media file that you wish to open in lightbox and hyperlink is the anchor text\u002Fimage.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" type=\"image\" hyperlink=\"http:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Fthumb.jpg\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Pop up YouTube video in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fnmp3Ra3Yj24\" type=\"youtube\" hyperlink=\"click here to pop up youtube video\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Pop up Vimeo video in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F1284237\" type=\"vimeo\" hyperlink=\"click here to pop up vimeo video\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Specify an Alternate Text for an Image\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" title=\"overlay image\" type=\"image\" hyperlink=\"http:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Fthumb.jpg\" alt=\"Thumbnail image description\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Apply Custom CSS\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can specify your own CSS class in the shortcode to customize a text\u002Fimage link.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fnmp3Ra3Yj24\" type=\"youtube\" hyperlink=\"click here to pop up youtube video\" class=\"custom_class\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Multiple CSS classes can be separated with a space. For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fnmp3Ra3Yj24\" type=\"youtube\" hyperlink=\"click here to pop up youtube video\" class=\"custom_class custom_class2\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>For detailed documentation please visit the \u003Ca href=\"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-colorbox-plugin\u002F\" rel=\"nofollow ugc\">WordPress Colorbox\u003C\u002Fa> plugin page\u003C\u002Fp>\n","View image, video (YouTube, Vimeo), page, inline HTML, custom content in lightbox. Add jQuery Colorbox lightbox effect to your WordPress site.",5000,154829,86,23,"2025-08-16T01:19:00.000Z","6.8.5","3.0",[20,75,76,23,77],"gallery","image","photo","https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-colorbox-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-colorbox.zip",98,2,"2025-08-20 00:00:00",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":11,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":18,"tags":97,"homepage":100,"download_link":101,"security_score":54,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"simplelightbox","Simplelightbox","2.14.4","aknieriem","https:\u002F\u002Fprofiles.wordpress.org\u002Faknieriem\u002F","\u003Cp>The simplelightbox wordpress plugin brings the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fandreknieriem\u002Fsimplelightbox\" rel=\"nofollow ugc\">simplelightbox\u003C\u002Fa> jquery plugin to wordpress.\u003C\u002Fp>\n\u003Cp>You can change every option that the lightbox have in the admin panel under Design -> Simplelightbox.\u003C\u002Fp>\n","Touch-friendly image lightbox for mobile and desktop without requiring jQuery",30832,100,11,"2023-08-31T07:57:00.000Z","6.3.0","3.0.1",[76,23,98,99,24],"modal","overlay","https:\u002F\u002Fsimplelightbox.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimplelightbox.2.14.4.zip",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":18,"tags":117,"homepage":120,"download_link":121,"security_score":54,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"mpcx-lightbox","Lightbox","1.2.5","Stefan Hüsges","https:\u002F\u002Fprofiles.wordpress.org\u002Fdeustron\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftronsha\u002Fwp-lightbox-plugin\" rel=\"nofollow ugc\">Source Code on GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>Select “Media File” at “Link to” when creating a gallery.\u003C\u002Fp>\n\u003Cp>If the plugin is active, the images are now open in the lightbox.\u003C\u002Fp>\n\u003Cp>The plugin requires PHP 5.3.2 or newer.\u003C\u002Fp>\n\u003Cp>This plugin uses \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flokesh\u002Flightbox2\" rel=\"nofollow ugc\">Lightbox2\u003C\u002Fa> from Lokesh Dhakar, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffancyapps\u002Ffancybox\" rel=\"nofollow ugc\">fancyBox3\u003C\u002Fa> from Jānis Skarnelis, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjackmoore\u002Fcolorbox\" rel=\"nofollow ugc\">Colorbox\u003C\u002Fa> from Jack Moore and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmiromannino\u002FJustified-Gallery\" rel=\"nofollow ugc\">Justified Gallery\u003C\u002Fa> from Miro Mannino.\u003C\u002Fp>\n","Lightbox for Wordpress Gallery",700,19604,88,9,"2019-02-19T09:29:00.000Z","5.1.22","3.3",[20,118,75,119,23],"fancybox","justified-gallery","https:\u002F\u002Fgithub.com\u002Ftronsha\u002Fwp-lightbox-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmpcx-lightbox.1.2.5.zip",{"slug":123,"name":124,"version":96,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":110,"downloaded":129,"rating":80,"num_ratings":130,"last_updated":131,"tested_up_to":132,"requires_at_least":133,"requires_php":134,"tags":135,"homepage":138,"download_link":139,"security_score":92,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"wp-imageviewer","WP ImageViewer","Marcel Pol","https:\u002F\u002Fprofiles.wordpress.org\u002Fmpol\u002F","\u003Cp>ImageViewer is an image viewer inspired by Google Photo’s.\u003Cbr \u002F>\nIt may also look familiar to users of Ebay.com or Tweakers.net.\u003C\u002Fp>\n\u003Cp>It provides a modal for images, similar to modals as lightbox, colorbox and fancybox, just in a somewhat more abstract way.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Smooth dragging and panning images.\u003C\u002Fli>\n\u003Cli>Support touch devices.\u003C\u002Fli>\n\u003Cli>Double tap to zoom in\u002Fzoom out.\u003C\u002Fli>\n\u003Cli>Pinch in \u002F pinch out to zoom in\u002Fout.\u003C\u002Fli>\n\u003Cli>Snap view for easier panning and zooming experience.\u003C\u002Fli>\n\u003Cli>Exposed API to control zoom programmatically.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Anti-Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Clean user interface, no bells, no whistles, no horns.\u003C\u002Fli>\n\u003Cli>Lightweight code (no PHP, 2 JS files and 1 CSS file).\u003C\u002Fli>\n\u003Cli>No settings page (really).\u003C\u002Fli>\n\u003Cli>No database queries.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Upstream Project\u003C\u002Fh4>\n\u003Cp>You can look at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fs-yadav\u002Fiv-viewer\" rel=\"nofollow ugc\">Github\u003C\u002Fa> for the original code.\u003Cbr \u002F>\nThis project is integrated in this WordPress plugin and all ready to use.\u003C\u002Fp>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cp>This plugin is compatible with \u003Ca href=\"https:\u002F\u002Fwww.classicpress.net\" rel=\"nofollow ugc\">ClassicPress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Contributions\u003C\u002Fh4>\n\u003Cp>This plugin is also available in \u003Ca href=\"https:\u002F\u002Fcodeberg.org\u002Fcyclotouriste\u002Fwp-imageviewer\" rel=\"nofollow ugc\">Codeberg\u003C\u002Fa>.\u003C\u002Fp>\n","A zooming and panning plugin inspired by google photos for your web images.",11176,10,"2026-02-04T22:20:00.000Z","6.9.4","4.1","7.0",[20,118,136,137,23],"imageviewer","iv-viewer","https:\u002F\u002Ftimelord.nl","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-imageviewer.3.0.1.zip",{"slug":141,"name":142,"version":143,"author":144,"author_profile":145,"description":146,"short_description":147,"active_installs":148,"downloaded":149,"rating":49,"num_ratings":49,"last_updated":150,"tested_up_to":18,"requires_at_least":73,"requires_php":18,"tags":151,"homepage":18,"download_link":153,"security_score":54,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"simple-light-box","Simple Light TBox","1.0","vijay verma","https:\u002F\u002Fprofiles.wordpress.org\u002Fvijayverma\u002F","\u003Cp>Simple Light Box is the simple jquery effect to show a image in lightbox.\u003Cbr \u002F>\n\u003Cstrong>This is THE perfect tool to manage perfectly your WP terms for any taxonomy\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>It was written with this philosophy : best performances, more secured and brings a lot of new functions\u003C\u002Fp>\n\u003Cp>This plugin is developped on WordPress 3.3, with the constant WP_DEBUG to TRUE.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Administration\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Easy configuration ! (in WP admin)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>And more…\u003C\u002Fp>\n","Simple Light Box is the simple jquery effect to show a image in lightbox.",70,11522,"2012-05-22T15:19:00.000Z",[152,23,141],"light-box","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-light-box.zip",{"attackSurface":155,"codeSignals":182,"taintFlows":189,"riskAssessment":190,"analyzedAt":196},{"hooks":156,"ajaxHandlers":178,"restRoutes":179,"shortcodes":180,"cronEvents":181,"entryPointCount":49,"unprotectedCount":49},[157,163,167,170,174],{"type":158,"name":159,"callback":160,"file":161,"line":162},"action","init","set_definitions","index.php",57,{"type":158,"name":164,"callback":165,"file":161,"line":166},"wp_enqueue_scripts","scripts",58,{"type":158,"name":164,"callback":168,"file":161,"line":169},"css",59,{"type":158,"name":171,"callback":172,"file":161,"line":173},"wp_head","ad",60,{"type":158,"name":175,"callback":176,"file":161,"line":177},"plugins_loaded","simple_colorbox",172,[],[],[],[],{"dangerousFunctions":183,"sqlUsage":184,"outputEscaping":186,"fileOperations":49,"externalRequests":49,"nonceChecks":49,"capabilityChecks":49,"bundledLibraries":188},[],{"prepared":49,"raw":49,"locations":185},[],{"escaped":49,"rawEcho":49,"locations":187},[],[],[],{"summary":191,"deductions":192},"The static analysis of simple-colorbox v1.6.1 reveals a strong adherence to secure coding practices. The absence of dangerous functions, SQL injection vulnerabilities, file operations, external HTTP requests, and the proper use of prepared statements and output escaping for all identified code paths are commendable. Furthermore, the plugin has a minimal attack surface, with no exposed AJAX handlers, REST API routes, shortcodes, or cron events that appear to be unprotected. This indicates a generally robust security posture within the current codebase.\n\nHowever, the presence of a known, unpatched medium-severity vulnerability (CVE) is a significant concern. While the static analysis might not have detected this specific issue, its existence means users of this plugin are exposed to a known risk. The historical vulnerability pattern, with a medium-severity XSS issue being the most recent, suggests a potential for input sanitization or output encoding weaknesses that may not have been fully addressed or were introduced in subsequent changes not reflected in this static analysis. This unpatched vulnerability should be the primary focus for mitigation.\n\nIn conclusion, while the codebase itself appears to be well-secured with good practices, the single unpatched medium-severity vulnerability drastically lowers the overall security rating. The plugin's strengths lie in its clean code and limited attack surface, but its weakness is the immediate risk posed by the known and unpatched CVE. Users must prioritize addressing this vulnerability.",[193],{"reason":194,"points":195},"Unpatched medium-severity CVE",15,"2026-03-16T18:43:25.329Z",{"wat":198,"direct":215},{"assetPaths":199,"generatorPatterns":211,"scriptPaths":212,"versionParams":214},[200,201,202,203,204,205,206,207,208,209,210],"\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme1\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme2\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme3\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme4\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme5\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme6\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme7\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme8\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme9\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fthemes\u002Ftheme10\u002Fcolorbox.css","\u002Fwp-content\u002Fplugins\u002Fsimple-colorbox\u002Fscripts\u002Fjquery.colorbox-min.js",[],[213],"scripts\u002Fjquery.colorbox-min.js",[],{"cssClasses":216,"htmlComments":217,"htmlAttributes":219,"restEndpoints":220,"jsGlobals":221,"shortcodeOutput":223},[],[218],"\u003C!-- Simple Colorbox Plugin v1.6.1 by Ryan Hellyer ... https:\u002F\u002Fgeek.hellyer.kiwi\u002Fproducts\u002Fsimple-colorbox\u002F -->",[],[],[222],"colorboxSettings",[],{"error":225,"url":226,"statusCode":227,"statusMessage":228,"message":228},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fsimple-colorbox\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":93,"versions":230},[231,237,245,253,261,269,277,285,293,301,309],{"version":6,"download_url":26,"svn_tag_url":232,"released_at":38,"has_diff":48,"diff_files_changed":233,"diff_lines":38,"trac_diff_url":234,"vulnerabilities":235,"is_current":225},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.6.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.6&new_path=%2Fsimple-colorbox%2Ftags%2F1.6.1",[236],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":238,"download_url":239,"svn_tag_url":240,"released_at":38,"has_diff":48,"diff_files_changed":241,"diff_lines":38,"trac_diff_url":242,"vulnerabilities":243,"is_current":48},"1.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.3.1&new_path=%2Fsimple-colorbox%2Ftags%2F1.6",[244],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":246,"download_url":247,"svn_tag_url":248,"released_at":38,"has_diff":48,"diff_files_changed":249,"diff_lines":38,"trac_diff_url":250,"vulnerabilities":251,"is_current":48},"1.3.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.3.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.3.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.3&new_path=%2Fsimple-colorbox%2Ftags%2F1.3.1",[252],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":254,"download_url":255,"svn_tag_url":256,"released_at":38,"has_diff":48,"diff_files_changed":257,"diff_lines":38,"trac_diff_url":258,"vulnerabilities":259,"is_current":48},"1.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.2.4&new_path=%2Fsimple-colorbox%2Ftags%2F1.3",[260],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":262,"download_url":263,"svn_tag_url":264,"released_at":38,"has_diff":48,"diff_files_changed":265,"diff_lines":38,"trac_diff_url":266,"vulnerabilities":267,"is_current":48},"1.2.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.2.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.2.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.2.2&new_path=%2Fsimple-colorbox%2Ftags%2F1.2.4",[268],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":270,"download_url":271,"svn_tag_url":272,"released_at":38,"has_diff":48,"diff_files_changed":273,"diff_lines":38,"trac_diff_url":274,"vulnerabilities":275,"is_current":48},"1.2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.2.1&new_path=%2Fsimple-colorbox%2Ftags%2F1.2.2",[276],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":278,"download_url":279,"svn_tag_url":280,"released_at":38,"has_diff":48,"diff_files_changed":281,"diff_lines":38,"trac_diff_url":282,"vulnerabilities":283,"is_current":48},"1.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.2&new_path=%2Fsimple-colorbox%2Ftags%2F1.2.1",[284],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":286,"download_url":287,"svn_tag_url":288,"released_at":38,"has_diff":48,"diff_files_changed":289,"diff_lines":38,"trac_diff_url":290,"vulnerabilities":291,"is_current":48},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.1&new_path=%2Fsimple-colorbox%2Ftags%2F1.2",[292],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":294,"download_url":295,"svn_tag_url":296,"released_at":38,"has_diff":48,"diff_files_changed":297,"diff_lines":38,"trac_diff_url":298,"vulnerabilities":299,"is_current":48},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.0.1&new_path=%2Fsimple-colorbox%2Ftags%2F1.1",[300],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":302,"download_url":303,"svn_tag_url":304,"released_at":38,"has_diff":48,"diff_files_changed":305,"diff_lines":38,"trac_diff_url":306,"vulnerabilities":307,"is_current":48},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsimple-colorbox%2Ftags%2F1.0&new_path=%2Fsimple-colorbox%2Ftags%2F1.0.1",[308],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":143,"download_url":310,"svn_tag_url":311,"released_at":38,"has_diff":48,"diff_files_changed":312,"diff_lines":38,"trac_diff_url":38,"vulnerabilities":313,"is_current":48},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-colorbox.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsimple-colorbox\u002Ftags\u002F1.0\u002F",[],[314],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38}]