Plugin icon

Responsive Lightbox & Gallery

responsive-lightbox

Vulnerabilities:

15

Last Updated:

March 12, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-02-24
Title
Responsive Lightbox & Gallery < 2.7.2 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
Fixed in
Fixed in 2.7.2
CVSS
5 (medium)
Published
2026-02-03
Title
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSS
Fixed in
Fixed in 2.6.1
CVSS
8.8 (high)
Published
2025-11-18
Title
Responsive Lightbox & Gallery < 2.5.4 - Authenticated (Author+) Server-Side Request Forgery
Fixed in
Fixed in 2.5.4
CVSS
5.4 (medium)
Published
2025-09-15
Title
Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments
Fixed in
Fixed in 2.5.3
CVSS
8.8 (high)
Published
2025-06-06
Title
Responsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSS
Fixed in
Fixed in 2.5.2
CVSS
6.8 (medium)
Published
2025-04-24
Title
Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSS
Fixed in
Fixed in 2.5.1
CVSS
6.8 (medium)
Published
2025-03-04
Title
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library
Fixed in
Fixed in 2.4.8
CVSS
6.4 (medium)
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Fixed in
Fixed in 2.4.9
CVSS
5.9 (medium)
Published
2024-10-15
Title
Responsive Lightbox < 2.4.9 - Author+ Stored XSS
Fixed in
Fixed in 2.4.9
CVSS
4.8 (medium)
Published
2024-08-26
Title
Responsive Lightbox < 2.4.8 - Missing Authorization
Fixed in
Fixed in 2.4.8
CVSS
5.3 (medium)
Published
2024-08-21
Title
Responsive Lightbox & Gallery < 2.4.8 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Fixed in
Fixed in 2.4.8
CVSS
6.4 (medium)
Published
2024-04-05
Title
Responsive Lightbox < 2.4.7 - Information Disclosure
Fixed in
Fixed in 2.4.7
CVSS
4.3 (medium)
Published
2023-11-29
Title
Responsive Lightbox < 2.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via name
Fixed in
Fixed in 2.4.6
CVSS
6.4 (medium)
Published
2017-07-04
Title
Responsive Lightbox by dFactory <= 1.7.1 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.7.2
CVSS
6.1 (medium)
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.4.12
CVSS
n/a