6.8
Medium
CVE-2025-3742 The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes…
Description
The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Responsive Lightbox & Gallery 2.5 | earliest → < 2.5.1 | 2.5.1 |
Other CVEs of Responsive Lightbox & Gallery
The 4 CVEs of Responsive Lightbox & Gallery →
CVE-2025-15386
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack…
8.8
High
CVE-2025-9710
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes…
6.3
Medium
CVE-2025-5093
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and…
5.4
Medium