CVE-2025-13612 | Album and Image Gallery Plus Lightbox Plugin up to 2.1.7 on WordPress Shortcode aigpl-gallery-album cross site scripting

February 18, 2026 Yanac

A vulnerability described as problematic has been identified in Album and Image Gallery Plus Lightbox Plugin up to 2.1.7 on WordPress. This vulnerability affects the function aigpl-gallery-album of the component Shortcode Handler. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2025-13612. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More