Skip to content

Known vulnerabilities in dFactory Responsive Lightbox & Gallery

Is your version affected?

CVE Summary Score Published
CVE-2026-103897 The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment'… 4.4 Medium Oct 10, 2026
CVE-2026-2479 The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up… 5.0 Medium Feb 25, 2026
CVE-2025-12359 The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up… 5.4 Medium Nov 19, 2025
CVE-2024-5667 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Featherlight.js… 6.4 Medium Mar 5, 2025
CVE-2024-5020 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox… 6.4 Medium Dec 4, 2024
CVE-2024-6870 The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads… 6.4 Medium Aug 22, 2024
CVE-2023-49174 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory… 5.9 Medium Dec 15, 2023

Other dFactory products