Responsive Lightbox
Vendor:
First CVE: Jul 7, 2017 · Active for 9 years
9
Total CVEs
More Total CVEs than 86% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Responsive Lightbox over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 7, 2017
9 years ago
Most Recent CVE
Jun 26, 2026
28 days ago
CVE Severity & Scoring
Responsive Lightbox9 CVEs
67%
22%
11%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (22.2%)
Unknown0 (0.0%)
Required7 (77.8%)
Privileges Required
Low4 (44.4%)
High2 (22.2%)
None3 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-56041HIGH Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. | Jun 26, 2026 | 7.1 | 29 | NO | NO |
CVE-2024-43924CRITICAL Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a | Oct 23, 2024 | 9.8 | 29 | NO | NO |
CVE-2024-31252HIGH Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6. | Jun 9, 2024 | 8.8 | 24 | NO | NO |
CVE-2017-2243MEDIUM Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. | Jul 7, 2017 | 6.1 | 22 | NO | NO |
CVE-2025-3742MEDIUM The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow us | May 15, 2025 | 6.8 | 19 | NO | NO |
CVE-2024-49282MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsive Lightbox responsive-lightbox allows Stored XSS.This issue | Oct 17, 2024 | 5.9 | 18 | NO | NO |
CVE-2024-6870MEDIUM The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient | Aug 22, 2024 | 5.4 | 18 | NO | NO |
CVE-2025-5093MEDIUM The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting them back in a page/p | Jun 27, 2025 | 5.4 | 17 | NO | NO |
CVE-2023-49174MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsive Lightbox & Gallery allows Stored XSS.This issue affects Re | Dec 15, 2023 | 5.4 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Responsive Lightbox
Top CWEs
Versions
No cataloged versions.