Now officially on WordPress.org

CVE Database / CVE-2025-12359

CVE · Medium

CVE-2025-12359 — Responsive Lightbox & Gallery [responsive-lightbox] < 2.5.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-12359 Responsive Lightbox & Gallery [responsive-lightbox] < 2.5.4 Server-Side Request Forgery (SSRF) Medium 5.4 < 2.5.4 2.5.4 2025-11-18 —

CVE-2025-12359

The Responsive Lightbox & Gallery plugin for WordPress contains a vulnerability in its 'get_image_size_by_url' function that allows malicious users with at least Author-level access to bypass normal URL restrictions. This flaw enables attackers to make unauthorized requests to external locations, potentially accessing sensitive data or manipulating internal systems. Versions of the plugin up to and including 2.5.3 are affected by this issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings