Dfactory vulnerabilities

Products

• Responsive Lightbox & Gallery 7
• Responsive Lightbox 6
• Responsive Lightbox 5
• Download Attachments 4
• Post Views Counter 2

Newest

• dfactory responsive lightbox & gallery Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute CVE-2026-103897 4.4 MediumOctober 10, 2026
• dfactory responsive lightbox WordPress Responsive Lightbox plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-56041 7.1 HighJune 26, 2026
• dfactory download attachments WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-39616 5.3 MediumApril 8, 2026
• dfactory responsive lightbox & gallery Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload CVE-2026-2479 5.0 MediumFebruary 25, 2026
• dfactory responsive lightbox & gallery Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery CVE-2025-12359 5.4 MediumNovember 19, 2025
• dfactory events maker by dfactory WordPress Events Maker by dFactory plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability CVE-2025-62941 6.5 MediumOctober 27, 2025
• dfactory responsive lightbox, unknown responsive lightbox & gallery +1 more Responsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSS CVE-2025-5093 5.4 MediumJune 27, 2025
• dfactory download attachments WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-49995 5.3 MediumJune 20, 2025
• dfactory responsive lightbox, unknown responsive lightbox & gallery +1 more Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSS CVE-2025-3742 6.8 MediumMay 15, 2025
• cipherdevgroup wp featherlight – a simple jquery lightbox, dfactory responsive lightbox & gallery +1 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library CVE-2024-5667 6.4 MediumMarch 5, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• dfactory responsive lightbox WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability CVE-2024-43924 5.3 MediumOctober 23, 2024
• dfactory responsive lightbox WordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-49282 5.9 MediumOctober 17, 2024
• dfactory responsive lightbox & gallery, responsive lightbox +1 more Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload CVE-2024-6870 6.4 MediumAugust 22, 2024
• dfactory responsive lightbox, responsive lightbox \& gallery +1 more WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability CVE-2024-31252 4.3 MediumJune 9, 2024
• dfactory download attachments Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3230 6.4 MediumJune 4, 2024
• dfactory post views counter WordPress Post Views Counter plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31264 4.3 MediumApril 12, 2024
• dfactory image watermark Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification CVE-2024-1994 4.3 MediumApril 6, 2024
• dfactory responsive lightbox & gallery, responsive lightbox +1 more WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49174 5.9 MediumDecember 15, 2023
• dfactory download attachments Download Attachments < 1.3 - Contributor+ Stored XSS CVE-2023-0076 5.4 MediumMarch 6, 2023
• dfactory post views counter Post Views Counter < 1.3.5 - Authenticated Stored XSS CVE-2021-24613 4.8 MediumSeptember 20, 2021
• dfactory responsive lightbox Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an... CVE-2017-2243 6.1 MediumJuly 7, 2017