ARI Fancy Lightbox
Watch: tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 20 |
| Security | 95 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is ARI Fancy Lightbox still maintained?
- No. Last release 24 Sep 2025, over 1 year ago. 24 Sep 2025 · wordpress.org
- Who owns ARI Fancy Lightbox, and has it changed hands?
- No change recorded. Main committer arisoft since Jan 2017. 4 Nov 2026 · SVN log
- Was ARI Fancy Lightbox removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is ARI Fancy Lightbox safe?
- 4 known vulnerabilities, all fixed (latest in 1.4.1). Not on the exploited list. 5 Sep 2025 · Wordfence Intelligence
- Is the latest ARI Fancy Lightbox update safe to install?
- No ownership change before 1.4.1. No one-star spike after it. 24 Sep 2025 · Release history
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| arisoft | 24 Jan 2017 to 24 Sep 2025, 125 commits |
|---|
1 committer recorded. No ownership change since 2017.
Maintenance
- Last release
- 14 months ago
- Releases, 24 months
- 3
- Tested up to
- 6.8 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 4 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 2 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 24 Sep 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.7.
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q3 2024.
| 5 star | 64 |
|---|---|
| 4 star | 1 |
| 3 star | 2 |
| 2 star | 0 |
| 1 star | 4 |
- The plug-in does not work! · 1 star · 22 Jul 2022
- Not for average users · 1 star · 21 Dec 2021
Security record
1 vulnerability in 24 months (4 on record), patched (latest fixed in 1.4.1).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Sep 2025 | ARI Fancy Lightbox <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.4.0 | 1.4.1 | 20 |
| 25 Sep 2024 | ARI Fancy Lightbox <= 1.3.17 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 1.3.17 | 1.3.18 | Patched before disclosure |
| 20 May 2024 | PDF.js < 4.2.67 - Arbitrary JavaScript Execution | 6.4 | <= 1.3.14 | 1.3.15 | 46 |
| 17 Feb 2022 | ARI Fancy Lightbox <= 1.3.8 - Reflected Cross-Site Scripting | 6.1 | < 1.3.9 | 1.3.9 | 1 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 93 |
|---|---|
| 11 May 2026 | 199 |
| 18 May 2026 | 173 |
| 25 May 2026 | 168 |
| 1 Jun 2026 | 169 |
| 8 Jun 2026 | 161 |
| 15 Jun 2026 | 185 |
| 22 Jun 2026 | 130 |
| 29 Jun 2026 | 146 |
| 6 Jul 2026 | 158 |
| 13 Jul 2026 | 142 |
| 20 Jul 2026 | 190 |
| 27 Jul 2026 | 183 |
| 3 Aug 2026 | 209 |
| 10 Aug 2026 | 207 |
| 17 Aug 2026 | 182 |
| 24 Aug 2026 | 180 |
| 31 Aug 2026 | 179 |
| 7 Sep 2026 | 191 |
| 14 Sep 2026 | 258 |
| 21 Sep 2026 | 230 |
| 28 Sep 2026 | 280 |
| 5 Oct 2026 | 262 |
| 12 Oct 2026 | 194 |
| 19 Oct 2026 | 374 |
| 26 Oct 2026 | 350 |
| 2 Nov 2026 | 57 |
Weekly downloads over the last 4 weeks are 25% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.4.1 |
|---|---|
| Author | arisoft |
| Added | 22 Jan 2017 |
| Last updated | 24 Sep 2025 |
| Active installs | 10,000+ |
| Requires WordPress | 3.4 |
| Tested up to | 6.8.12 |
| Requires PHP | not stated |
| Category | Design & Themes |
| Tags | popup, fancybox, lightbox, fancybox3, video lightbox |
Other plugins by this author: Contact Form 7 Connector, ARI Stream Quiz - WordPress Quizzes Builder, Contact Form 7 Editor Button
Questions
Is ARI Fancy Lightbox still maintained?
No. Last release 24 Sep 2025, over 1 year ago.
Who owns ARI Fancy Lightbox, and has it changed hands?
No change recorded. Main committer arisoft since Jan 2017.
Was ARI Fancy Lightbox removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is ARI Fancy Lightbox safe?
4 known vulnerabilities, all fixed (latest in 1.4.1). Not on the exploited list.
Is the latest ARI Fancy Lightbox update safe to install?
No ownership change before 1.4.1. No one-star spike after it.