The WP Video Lightbox plugin for WordPress is not secure in versions up to 1.9.4. An attacker who has access to the administrative side of the plugin could inject malicious web scripts on pages that would run when someone visits those pages. This could lead to serious security risks.