Medium
CVE-2026-103897
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filters
High
CVE-2026-56041
Responsive Lightbox & Gallery <= 2.7.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-2479
Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
High
CVE-2025-15386
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-12359
Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery
High
CVE-2025-9710
Responsive Lightbox & Gallery <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-5093
Responsive Lightbox & Gallery <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3742
Responsive Lightbox & Gallery <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5667
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Medium
CVE-2024-49282
Responsive Lightbox <= 2.4.8 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-43924
Responsive Lightbox <= 2.4.7 - Missing Authorization
Medium
CVE-2024-6870
Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Medium
CVE-2024-31252
Responsive Lightbox <= 2.4.6 - Missing Authorization via Information Disclosure
Medium
CVE-2023-49174
Responsive Lightbox <= 2.4.5 - Authenticated (Author+) Stored Cross-Site Scripting via name
Medium
CVE-2022-3987
Responsive Lightbox2 <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
d99d7a26-3645-4ff5-8c48-17b6fa77a228
Responsive Lightbox & Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
d45a4b0b-bb98-4c35-a743-c434946002a2
Responsive Lightbox2 <= 1.0.2 - Cross-Site Scripting
Medium
CVE-2017-2243
Responsive Lightbox & Gallery <= 1.7.1 - Cross-Site Scripting
Medium
CVE-2013-6837
PrettyPhoto Library (Multiple Plugins and Themes) <= 3.1.4 - DOM Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.