Skip to content
PluginCanary

WP Lightbox 2

by Syed Balkhi · 20,000+ active installs · Checked 4 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

77/ 100 Canary Score
Sub-scores for WP Lightbox 2
Ownership100
Maintenance50
Security85
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WP Lightbox 2 still maintained?
Yes. Last release 31 Jan 2026, 2 releases in the last 24 months. 31 Jan 2026 · wordpress.org
Who owns WP Lightbox 2, and has it changed hands?
No change recorded. Main committer johnjamesjacoby since Jun 2024. 4 Nov 2026 · SVN log
Was WP Lightbox 2 removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Lightbox 2 safe?
4 known vulnerabilities, all fixed (latest in 3.0.7). Not on the exploited list. 30 Mar 2026 · Wordfence Intelligence
Is the latest WP Lightbox 2 update safe to install?
No ownership change before 3.0.7. No one-star spike after it. 31 Jan 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
griffinjt28 Jul 2015 to 7 Mar 2024, 5 commits
csskevin2 Oct 2020 to 2 Oct 2020, 3 commits
chuck19829 Nov 2020 to 3 Jan 2021, 2 commits
johnjamesjacoby26 Jun 2024 to 31 Jan 2026, 11 commits

4 committers recorded. No ownership change since 2011.

Maintenance

Last release
9 months ago
Releases, 24 months
2
Tested up to
6.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for WP Lightbox 2
Q1 20241
Q2 20249
Q3 20240
Q4 20240
Q1 20250
Q2 20251
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Last release 31 Jan 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star72
4 star2
3 star3
2 star2
1 star10
Latest low reviews

Security record

2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 3.0.7).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Mar 2026WP Lightbox 2 < 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4< 3.0.73.0.7Patched before disclosure
9 Jun 2025WP Lightbox 2 <= 3.0.6.7 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.0.6.73.0.6.8Patched before disclosure
2 Jul 2024WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4<= 3.0.6.63.0.6.7Patched before disclosure
12 Oct 2023WP Lightbox 2 <= 3.0.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings5.5<= 3.0.6.53.0.6.6148

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Lightbox 2
4 May 2026170
11 May 2026515
18 May 2026504
25 May 2026619
1 Jun 2026453
8 Jun 2026399
15 Jun 2026399
22 Jun 2026368
29 Jun 2026380
6 Jul 2026354
13 Jul 2026364
20 Jul 2026494
27 Jul 2026461
3 Aug 2026415
10 Aug 2026398
17 Aug 2026366
24 Aug 2026350
31 Aug 2026390
7 Sep 2026370
14 Sep 2026407
21 Sep 2026419
28 Sep 2026418
5 Oct 2026415
12 Oct 2026403
19 Oct 2026971
26 Oct 2026663
2 Nov 202687

Weekly downloads over the last 4 weeks are 24% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Catch GalleryScore 100 · 10,000+Simple LightboxScore 98 · 100,000+Lightbox with PhotoSwipeScore 98 · 20,000+Twenty20 Image Before-AfterScore 98 · 20,000+Portfolio Filter GalleryScore 96 · 20,000+

Facts

Version3.0.7
AuthorSyed Balkhi
Added27 Nov 2011
Last updated31 Jan 2026
Active installs20,000+
Requires WordPress3.0
Tested up to6.9.11
Requires PHPnot stated
CategoryDesign & Themes > Themes & Templates
Tagsimage, gallery, lightbox, photo gallery, lightbox popup

Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, One Click Demo Import, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Mail Logging, WP Crontrol

Questions

Is WP Lightbox 2 still maintained?

Yes. Last release 31 Jan 2026, 2 releases in the last 24 months.

Who owns WP Lightbox 2, and has it changed hands?

No change recorded. Main committer johnjamesjacoby since Jun 2024.

Was WP Lightbox 2 removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Lightbox 2 safe?

4 known vulnerabilities, all fixed (latest in 3.0.7). Not on the exploited list.

Is the latest WP Lightbox 2 update safe to install?

No ownership change before 3.0.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue