Responsive Lightbox

Vulnerabilities

• CVE-2024-43924

  WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability

  Critical 9.8

• CVE-2024-31252

  WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability

  High 8.8

• CVE-2026-56041

  WordPress Responsive Lightbox plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability

  High 7.1

• CVE-2024-5667

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library

  Medium 6.4

• CVE-2017-2243

  Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML v

  Medium 6.1

• CVE-2024-49282

  WordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability

  Medium 5.9

• CVE-2025-12359

  Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery

  Medium 5.4

• CVE-2024-6870

  Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload

  Medium 5.4

• CVE-2023-49174

  WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

  Medium 5.4

• CVE-2026-2479

  Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload

  Medium 5.0