Responsive Lightbox & Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:responsive_lightbox_&_gallery:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Responsive Lightbox & Gallery (5d6f0d20-f979-5c76-95cb-b38af2ab1fb9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9710 |
vulnerable | 2026-06-08 07:47:09.585343 |
Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.
Published: 2025-10-06T06:00:06.607Z
Updated: 2025-10-06T18:50:04.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5093 |
vulnerable | 2026-06-08 07:35:24.147146 |
Responsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSS
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting them back in a page/post where used, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2025-06-27T06:00:08.082Z
Updated: 2025-06-27T14:30:24.444Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3742 |
vulnerable | 2026-06-08 07:23:09.753220 |
Responsive Lightbox & Gallery < 2.5.1 - Contributor+ Stored XSS
The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2025-05-15T06:00:02.551Z
Updated: 2025-05-15T15:56:29.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15386 |
vulnerable | 2026-06-08 07:06:36.160466 |
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSS
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by posting a comment with a malicious link when lightbox for comments are enabled and then approved.
Published: 2026-02-24T06:00:07.864Z
Updated: 2026-02-24T16:29:30.065Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.