CVE-2025-15386

creationtimestamp| type| source ---|---|--- 2026-02-24 21:07:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn356nhrc2o...

CVE-2025-15386 Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSS

The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by posting a comment with a malicious link when lightbox for comments are enabled and then approved...