Wordpress core is quite secure, remove write access outside the upload folder. It contains sticky post now and the query block. A light box has varying requirem

Wordpress core is quite secure, remove write access outside the upload folder. It contains sticky post now and the query block. A light box has varying requirements so there is not one solution but try the builtin gallery block. And as the article mentions it has a healthy ecosystem.