Unknown Responsive Lightbox & Gallery vulnerabilities

4 vulnerabilities

Known vulnerabilities in Unknown Responsive Lightbox & Gallery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2025-9710unknownresponsive lightbox & gallery+1
EPSS score
0.21%
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.6.4CVE-2025-5093dfactoryresponsive_lightbox+2
EPSS score
0.23%
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting them back in a page/post where used, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.8.8CVE-2025-15386unknownresponsive lightbox & gallery+1
EPSS score
0.27%
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by posting a comment with a malicious link when lightbox for comments are enabled and then approved.6.8CVE-2025-3742dfactoryresponsive_lightbox+2
EPSS score
0.54%
The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.