Product by dFactory
Responsive Lightbox & Gallery
10 known vulnerabilities in Responsive Lightbox & Gallery (dFactory), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2025-3742 | Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSS | 6.8 | |
| Medium | CVE-2026-103897 | dFactory Responsive Lightbox & Gallery: Cross-site Scripting | 4.4 | |
| Medium | CVE-2024-5020 | ExtendThemes Colibri Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-5667 | Cipherdevgroup WP Featherlight: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-6870 | dFactory Responsive Lightbox & Gallery: Cross-site Scripting | 6.4 | |
| Medium | CVE-2023-49174 | WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS) | 5.9 | |
| Medium | CVE-2026-2479 | dFactory Responsive Lightbox & Gallery: Server-Side Request Forgery (SSRF) | 5.0 | |
| Medium | CVE-2025-12359 | Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery | 5.4 | |
| Medium | CVE-2025-5093 | Responsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSS | 5.4 | |
| High | CVE-2024-31252 | WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability | 4.3 |