VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Responsive Lightbox & Gallery security & vulnerabilities

responsive-lightbox— active installsLast vulnerability Oct 9, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin
18Known vulnerabilities
  • Critical0
  • High3
  • Medium15
  • Low0
Vulnerabilities per year
2014: 1 vulnerability1142016: 1 vulnerability1162022: 1 vulnerability1222023: 1 vulnerability1232024: 5 vulnerabilities5242025: 5 vulnerabilities5252026: 4 vulnerabilities426

All Responsive Lightbox & Gallery vulnerabilities

Responsive Lightbox & Gallery vulnerabilities
SeverityVulnerabilityCVEPublished
Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute
≤2.7.9Update to 2.7.10
CVE-2026-103897
High7.2Unauthenticated Stored Cross-Site Scripting
≤2.7.6Update to 2.7.7
CVE-2026-56041
Medium5.0Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
≤2.7.1Update to 2.7.2
CVE-2026-2479
High7.2Unauthenticated Stored Cross-Site Scripting
<2.6.1Update to 2.6.1
CVE-2025-15386
Medium5.4Authenticated (Author+) Server-Side Request Forgery
≤2.5.3Update to 2.5.4
CVE-2025-12359
High7.2Unauthenticated Stored Cross-Site Scripting
≤2.5.2Update to 2.5.3
CVE-2025-9710
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.5.1Update to 2.5.2
CVE-2025-5093
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.5.0Update to 2.5.1
CVE-2025-3742
Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library
≤2.4.7Update to 2.4.8
CVE-2024-5667
Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
≤3.59.4Update to 3.59.5
CVE-2024-5020
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤2.4.8Update to 2.4.9
CVE-2024-49282
Medium5.3Missing Authorization
≤2.4.7Update to 2.4.8
CVE-2024-43924
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via File Upload
≤2.4.7Update to 2.4.8
CVE-2024-6870
Medium4.3Missing Authorization via Information Disclosure
≤2.4.6Update to 2.4.7
CVE-2024-31252
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via name
≤2.4.5Update to 2.4.6
CVE-2023-49174
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤2.4.1Update to 2.4.2
—
Medium6.1Cross-Site Scripting
≤1.7.1Update to 1.7.2
CVE-2017-2243
Medium6.1DOM Cross-Site Scripting
<1.1.7Update to 1.1.7
CVE-2013-6837

Responsive Lightbox & Gallery: common questions

Does Responsive Lightbox & Gallery have known vulnerabilities?

Yes. VulnCrest Radar lists 18 known vulnerabilities in Responsive Lightbox & Gallery: 3 high, 15 medium. At least one is not fixed in the latest version.

How do I check which version of Responsive Lightbox & Gallery I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Responsive Lightbox & Gallery vulnerability?

CVE-2026-103897, published Oct 9, 2026: Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute. Severity: Medium (CVSS 4.4).

Is any Responsive Lightbox & Gallery vulnerability listed in CISA KEV?

No. None of the known Responsive Lightbox & Gallery vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?