Unknown Responsive Lightbox & Gallery vulnerabilities

2 CVEs affecting Unknown Responsive Lightbox & Gallery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15386, published 2026-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-15386, published 2026-02-24. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by posting a comment…
CVE-2025-9710, published 2025-10-06. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality…