Dfactory Responsive_lightbox
6 CVEs affecting Dfactory Responsive_lightbox. Latest disclosed: 2025-06-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3742 | Medium | 6.8 | 2025-05-15 | The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post… |
CVE-2024-6870 | Medium | 6.4 | 2024-08-22 | The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4… |
CVE-2017-2243 | Medium | 6.1 | 2017-07-07 | Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vect… |
CVE-2023-49174 | Medium | 5.9 | 2023-12-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsive Lightbox & Gallery allows Stored XSS… |
CVE-2025-5093 | Medium | 5.4 | 2025-06-27 | The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting… |
CVE-2024-43924 | Medium | 5.3 | 2024-10-23 | Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsi… |