RL
Product
Responsive Lightbox & Gallery
by dfactory · last CVE Oct 10, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 7Low 0
Watch

Add Responsive Lightbox & Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-31252
8.8
0%
Jun 9
WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability
Affected: before 2.4.7
CVE-2024-5667
6.4
0%
Mar 5
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library
Affected: through 2.4.7
CVE-2024-5020
6.4
0%
Dec 4
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Affected: through 2.4.8
CVE-2025-12359
5.4
0%
Nov 19
Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery
Affected: through 2.5.3
CVE-2024-6870
5.4
0%
Aug 22
Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Affected: through 2.4.7
CVE-2023-49174
5.4
0%
Dec 15
WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
Affected: through 2.4.5
CVE-2026-2479
5.0
0%
Feb 25
Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
Affected: through 2.7.1
CVE-2026-103897
4.4
0%
Oct 10
Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute
Affected: through 2.7.9
Showing 8