Responsive Lightbox & Gallery vulnerabilities

Plugin slug responsive-lightbox · 18 known vulnerabilities · latest disclosed 2026-10-09 · WordPress.org page

Every listed vulnerability has a fix. Version 2.7.10 or later is not affected by any of them. If your site runs an older version, update it.

3 of 18 rated high or critical (CVSS 7 or more).

Known vulnerabilities in Responsive Lightbox & Gallery

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 4.4<= 2.7.92.7.10CVE-2026-1038972026-10-09Advisory
High 7.2<= 2.7.62.7.7CVE-2026-560412026-06-24Advisory
Medium 5<= 2.7.12.7.2CVE-2026-24792026-02-24Advisory
High 7.2< 2.6.12.6.1CVE-2025-153862026-02-03Advisory
Medium 5.4<= 2.5.32.5.4CVE-2025-123592025-11-18Advisory
High 7.2<= 2.5.22.5.3CVE-2025-97102025-09-15Advisory
Medium 6.4<= 2.5.12.5.2CVE-2025-50932025-06-06Advisory
Medium 6.4<= 2.5.02.5.1CVE-2025-37422025-04-24Advisory
Medium 6.4<= 2.4.72.4.8CVE-2024-56672025-03-04Advisory
Medium 6.4<= 2.4.82.4.9CVE-2024-50202024-12-03Advisory
Medium 6.4<= 2.4.82.4.9CVE-2024-492822024-10-15Advisory
Medium 5.3<= 2.4.72.4.8CVE-2024-439242024-08-26Advisory
Medium 6.4<= 2.4.72.4.8CVE-2024-68702024-08-21Advisory
Medium 4.3<= 2.4.62.4.7CVE-2024-312522024-04-05Advisory
Medium 6.4<= 2.4.52.4.6CVE-2023-491742023-11-29Advisory
Medium 5.5<= 2.4.12.4.2none2022-11-04Advisory
Medium 6.1<= 1.7.11.7.2CVE-2017-22432016-12-01Advisory
Medium 6.1< 1.4.121.4.12CVE-2013-68372014-08-01Advisory

Check if a site is affected

Enter a site address to see which version of Responsive Lightbox & Gallery and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the Responsive Lightbox & Gallery plugin safe to use?

All 18 known issues are fixed in current versions (2.7.10 or later). Keeping it updated is what matters.

How do I check which version of Responsive Lightbox & Gallery my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome