CVE-2025-32176

Summary

CVE-2025-32176 is a Cross-Site Scripting (XSS) vulnerability affecting Gallery Blocks with Lightbox, a plugin used in WordPress websites. The flaw, located in the improper neutralization of user input during web page generation, enables an attacker to inject malicious scripts into affected pages. This can lead to unauthorized access to user data or even complete site takeover. Versions from n/a through 3.2.5 are reportedly impacted. Users are strongly advised to update to the latest, secure version of the plugin as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.