dfactory vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20231
3. 20249
4. 20253
5. 20264

Newest CVEs

• CVE-2026-103897

  Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute

  dfactory · Responsive Lightbox & Gallery

  Medium4.4
• CVE-2026-56041

  WordPress Responsive Lightbox plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability

  dFactory · Responsive Lightbox

  High7.1
• CVE-2026-39616

  WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability

  dFactory · Download Attachments

  Medium5.3
• CVE-2026-2479

  Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload

  dfactory · Responsive Lightbox & Gallery

  Medium5.0
• CVE-2025-12359

  Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery

  dfactory · Responsive Lightbox & Gallery

  Medium5.4
• CVE-2025-62941

  WordPress Events Maker by dFactory plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability

  dFactory · Events Maker by dFactory

  Medium6.5
• CVE-2025-49995

  WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability

  dFactory · Download Attachments

  Medium5.3
• CVE-2024-5667

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library

  cipherdevgroup · WP Featherlight – A Simple jQuery Lightbox

  Medium6.4
• CVE-2024-5020

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

  extendthemes · Colibri Page Builder

  Medium6.4
• CVE-2024-43924

  WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability

  dFactory · Responsive Lightbox

  Medium5.3