CVE Database /
CVE-2025-15386
CVE · High
CVE-2025-15386 — Responsive Lightbox & Gallery [responsive-lightbox] < 2.6.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-15386
|
Responsive Lightbox & Gallery [responsive-lightbox] < 2.6.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
8.8
|
< 2.6.1
|
2.6.1 |
2026-02-03 |
—
|
CVE-2025-15386
The Responsive Lightbox & Gallery plugin for WordPress contains a security flaw affecting versions prior to 2.6.1, where inadequate filtering of input data allows malicious code to be embedded into website content. This vulnerability enables unauthorized parties to insert executable scripts that will run whenever users visit the compromised pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings