Title: Security issue?
Last modified: June 28, 2024

---

# Security issue?

 *  Resolved [shelleyweb](https://wordpress.org/support/users/espressivo/)
 * (@espressivo)
 * [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/)
 * Will this be patched soon?
 * [https://patchstack.com/database/vulnerability/ari-fancy-lightbox/wordpress-ari-fancy-lightbox-plugin-1-3-14-cross-site-scripting-xss-vulnerability?_a_id=431](https://patchstack.com/database/vulnerability/ari-fancy-lightbox/wordpress-ari-fancy-lightbox-plugin-1-3-14-cross-site-scripting-xss-vulnerability?_a_id=431)

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Author [arisoft](https://wordpress.org/support/users/arisoft/)
 * (@arisoft)
 * [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/#post-17856346)
 * Hi
 * It will be fixed immediately when receive details from PatchStack team about 
   the issue.
 *  [R2Y Mediamatik](https://wordpress.org/support/users/r2ymedia/)
 * (@r2ymedia)
 * [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/#post-17865548)
 * I have the same problem and would like to have that fixed soon:
 * Category:PLUGIN
 * Versions-Affected:<= 1.3.14
 * Type:Cross Site Scripting
 * Severity:MEDIUM
 * Description:This could allow a malicious actor to inject malicious scripts, such
   as redirects, advertisements, and other HTML payloads into your website which
   will be executed when guests visit your site.
 *  Plugin Author [arisoft](https://wordpress.org/support/users/arisoft/)
 * (@arisoft)
 * [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/#post-17870470)
 * PDFJS library was updated to the latest version in “ARI Fancy Lightbox” v. 1.3.15.
 *  [JoeStraz](https://wordpress.org/support/users/joestraz/)
 * (@joestraz)
 * [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/#post-17879798)
 * It looks like the plugin was just removed from WordPress, thought it was patched?
   This makes me a bit concerned. Can you offer any insight into what is going on?
    -  This reply was modified 2 years, 1 month ago by [JoeStraz](https://wordpress.org/support/users/joestraz/).
 *  Plugin Author [arisoft](https://wordpress.org/support/users/arisoft/)
 * (@arisoft)
 * [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/#post-17882361)
 * The issue was fixed in v. 1.3.15. You can see it in original report on PatchStack
   site.
 * The plugin is temporary removed by WordPress team to re-run review process. Hope
   it will be returned back soon.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Security issue?’ is closed to new replies.

 * ![](https://ps.w.org/ari-fancy-lightbox/assets/icon-256x256.png?rev=1580843)
 * [ARI Fancy Lightbox - Popup for WordPress](https://wordpress.org/plugins/ari-fancy-lightbox/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ari-fancy-lightbox/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ari-fancy-lightbox/)
 * [Active Topics](https://wordpress.org/support/plugin/ari-fancy-lightbox/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ari-fancy-lightbox/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ari-fancy-lightbox/reviews/)

 * 5 replies
 * 4 participants
 * Last reply from: [arisoft](https://wordpress.org/support/users/arisoft/)
 * Last activity: [2 years, 1 month ago](https://wordpress.org/support/topic/security-issue-163/#post-17882361)
 * Status: resolved