Dfactory Responsive Lightbox vulnerabilities

• dfactory responsive lightbox & gallery Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute CVE-2026-103897 4.4 MediumOctober 10, 2026
• dfactory responsive lightbox WordPress Responsive Lightbox plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-56041 7.1 HighJune 26, 2026
• dfactory responsive lightbox & gallery Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload CVE-2026-2479 5.0 MediumFebruary 25, 2026
• dfactory responsive lightbox & gallery Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery CVE-2025-12359 5.4 MediumNovember 19, 2025
• cipherdevgroup wp featherlight – a simple jquery lightbox, dfactory responsive lightbox & gallery +1 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library CVE-2024-5667 6.4 MediumMarch 5, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• dfactory responsive lightbox WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability CVE-2024-43924 5.3 MediumOctober 23, 2024
• dfactory responsive lightbox WordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-49282 5.9 MediumOctober 17, 2024
• dfactory responsive lightbox & gallery, responsive lightbox +1 more Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload CVE-2024-6870 6.4 MediumAugust 22, 2024
• dfactory responsive lightbox, responsive lightbox \& gallery +1 more WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability CVE-2024-31252 4.3 MediumJune 9, 2024
• dfactory responsive lightbox & gallery, responsive lightbox +1 more WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49174 5.9 MediumDecember 15, 2023
• dfactory responsive lightbox Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an... CVE-2017-2243 6.1 MediumJuly 7, 2017