Advisories · Technology
dfactory Responsive Lightbox & Gallery.
Every CVE that names dfactory Responsive Lightbox & Gallery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.4 Medium
Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute
- dfactory Responsive Lightbox & Gallery
- Cross-site scripting (XSS)
- CVSS 5.0 Medium
Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
- dfactory Responsive Lightbox & Gallery
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery
- dfactory Responsive Lightbox & Gallery
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library
- cipherdevgroup WP Featherlight – A Simple jQuery Lightbox
- dfactory Responsive Lightbox & Gallery
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
- extendthemes Colibri Page Builder
- smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
- dfactory Responsive Lightbox & Gallery
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
- dFactory Responsive Lightbox & Gallery
- Cross-site scripting (XSS)