Skip to contentUnknown Responsive Lightbox & Gallery vulnerabilities
- dfactory responsive lightbox & galleryResponsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' AttributeCVE-2026-1038974.4 Medium
- dfactory responsive lightbox & galleryResponsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image UploadCVE-2026-24795.0 Medium
- unknown responsive lightbox & galleryResponsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSSCVE-2025-153868.8 High
- dfactory responsive lightbox & galleryResponsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request ForgeryCVE-2025-123595.4 Medium
- unknown responsive lightbox & galleryResponsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via CommentsCVE-2025-97106.3 Medium
- dfactory responsive lightbox, unknown responsive lightbox & gallery +1 moreResponsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSSCVE-2025-50935.4 Medium
- dfactory responsive lightbox, unknown responsive lightbox & gallery +1 moreResponsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSSCVE-2025-37426.8 Medium
- cipherdevgroup wp featherlight – a simple jquery lightbox, dfactory responsive lightbox & gallery +1 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript LibraryCVE-2024-56676.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript LibraryCVE-2024-50206.4 Medium
- dfactory responsive lightbox & gallery, responsive lightbox +1 moreResponsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File UploadCVE-2024-68706.4 Medium
- dfactory responsive lightbox & gallery, responsive lightbox +1 moreWordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-491745.9 Medium