high8.8
CVE-2025-15386
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules tha…
Impact
The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by posting a comment with a malicious link when lightbox for comments are enabled and then approved.
Affected products
| Product | Affected versions |
|---|---|
| Responsive Lightbox & Gallery WordPress Plugin | before 2.6.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.