Firelight Lightbox

86 Quality Score

Active Installs

24/30

With 200,000 active installs, Firelight Lightbox sits comfortably in the upper tier of WordPress plugins, reflecting strong long-term adoption across the community.

Update Freshness

25/25

Last updated 2026-05-08 and tested against WordPress 6.9.4, the plugin shows active and current maintenance against the latest core release.

User Rating

14/15

A 96 out of 100 from 346 reviewers is a strong endorsement, indicating consistently positive experiences among users who bothered to leave feedback.

Support Health

8/15

Only 3 support threads exist and none are marked resolved, which is a concern for anyone who may need hands-on help from the developer.

WP Compatibility

15/15

Compatibility scores full marks, with a low minimum requirement of WordPress 5.0 and PHP 7.0 meaning it will run on virtually any modern hosting environment.

Scores higher than 96% of indexed plugins

About

Formerly Easy Fancybox. The most popular WordPress lightbox plugin. Simple, fast, and responsive. Opens images, videos, PDFs, and custom popups.

Active Installs 200k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-10 2:11am GMT

Requires WordPress 5.0+

Tested Up To 7.1

Requires PHP 7.0+

Security History

7 known vulnerabilities, all patched

7 Medium

Most recent: July 23, 2026

View details ▸

Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attribute Medium

July 23, 2026 Patched in ["2.3.21"] CVE-2026-6454

Firelight Lightbox <= 2.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 19, 2025 Patched in ["2.3.17"] CVE-2025-52707

Firelight Lightbox <= 2.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 6, 2025 Patched in ["2.3.16"] CVE-2025-5035

Firelight Lightbox <= 2.3.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

April 21, 2025 Patched in ["2.3.15"] CVE-2025-3597

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library Medium

December 3, 2024 Patched in ["2.3.4"] CVE-2024-5020

Firelight Lightbox <= 2.3.3 - Authenticated (Author+) Stored Cross-Site Scripting Medium

October 24, 2024 Patched in ["2.3.4"] CVE-2024-50460

Easy Fancybox <= 1.8.17 - Authenticated Stored Cross-Site Scripting Medium

September 25, 2019 Patched in ["1.8.18"] CVE-2019-16524

What It Does

Firelight Lightbox (formerly Easy Fancybox) adds an overlay popup effect to images, embedded videos, PDFs, and inline HTML content on your WordPress site. It works automatically on standard WordPress galleries and most linked media, requiring no shortcodes or manual markup. Out of the box it delivers a responsive, touch-friendly viewing experience without touching theme templates.

Who It's For

This plugin is a strong fit for photographers, designers, artists, restaurants, real estate agents, and other visual-first site owners who want their existing image galleries and embedded media to open in a clean overlay without rebuilding layouts. It also suits site owners who want a set-and-forget solution: install, activate, and the lightbox starts working on default WordPress images, YouTube embeds, and PDF links.

Who Should Skip It

Skip this plugin if you already use a gallery plugin like FooGallery or Modula that has its own built-in lightbox, as running both will cause conflicts and double-loading scripts. Developers building custom frontends with React, Vue, or heavy JavaScript frameworks should also look elsewhere, since Fancybox's jQuery-based behaviour adds weight that modern SPA stacks do not need.

The Bottom Line

Firelight Lightbox earns an overall quality score of 85.64 out of 100, driven by excellent maintenance, compatibility, and user ratings. The one real weakness is support responsiveness, with zero resolved threads out of three, so users comfortable troubleshooting on their own will get the most value. For a simple, dependable lightbox that just works on default WordPress media, it remains one of the safest choices available.

Pick Shortcodes Ultimate if you need a broad toolkit of content elements beyond just lightboxes, including tabs, buttons, and accordions in one plugin.

Photo Gallery by FooGallery 89/100

Pick FooGallery if you want gallery layouts like masonry and carousel bundled with their own built-in lightbox rather than adding a separate plugin.

Smart Slider 3 89/100

Pick Smart Slider 3 if your priority is animated hero sliders and layered slide content rather than simple image overlay popups.

Robo Gallery – Photo & Image Slider 87/100

Pick Robo Gallery if you want a drag-and-drop gallery builder with built-in lightbox effects aimed at non-technical users.

MetaSlider 87/100

Pick MetaSlider if your main need is a reliable image and video slider widget for sidebars and pages, with lightbox as a secondary feature.