https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5093.htmlhttps://patchthecve.com/cve/CVE-2025-5093.htmlWed, 17 Jun 2026 09:47:11 +0000MEDIUM 5.4: The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting them back in a page/post where used, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attachttps://patchthecve.com/cve/CVE-2025-3742.htmlhttps://patchthecve.com/cve/CVE-2025-3742.htmlWed, 17 Jun 2026 09:20:35 +0000MEDIUM 6.8: The Responsive Lightbox & Gallery WordPress plugin before 2.5.1 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.https://patchthecve.com/cve/CVE-2024-43924.htmlhttps://patchthecve.com/cve/CVE-2024-43924.htmlWed, 17 Jun 2026 07:52:00 +0000MEDIUM 5.3: Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.https://patchthecve.com/cve/CVE-2024-6870.htmlhttps://patchthecve.com/cve/CVE-2024-6870.htmlWed, 17 Jun 2026 08:18:52 +0000MEDIUM 6.4: The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping affecting the rl_upload_image AJAX endpoint. This makes it possible for authentihttps://patchthecve.com/cve/CVE-2024-31252.htmlhttps://patchthecve.com/cve/CVE-2024-31252.htmlWed, 17 Jun 2026 07:28:03 +0000MEDIUM 4.3: Missing Authorization vulnerability in dFactory Responsive Lightbox.This issue affects Responsive Lightbox: from n/a through 2.4.6.