CVE-2025-15386 – Responsive Lightbox & Gallery < 2.6.1 – Unauthenticated Stored XSS

CVE ID : CVE-2025-15386

Published : Feb. 24, 2026, 6:16 a.m. | 49 minutes ago

Description : The Responsive Lightbox & Gallery WordPress plugin before 2.6.1 is vulnerable to an Unauthenticated Stored-XSS attack due to flawed regex replacement rules that can be abused by posting a comment with a malicious link when lightbox for comments are enabled and then approved.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…