PT-2025-40854 · WordPress · Responsive Lightbox & Gallery

Matthew Rollings · Published 2025-10-06 · Updated 2025-10-06 · CVE-2025-9710

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Responsive Lightbox & Gallery WordPress plugin versions prior to 2.5.3

Description The software does not properly handle HTML tag attribute modifications, which could allow unauthenticated attackers to include event handlers and conduct Stored Cross-Site Scripting (XSS) attacks. The issue allows abuse of the functionality through modifications to HTML tag attributes.

Recommendations Update to version 2.5.3 or later.

Exploit

Fix

Related Identifiers

CVE-2025-9710

Affected Products

Responsive Lightbox & Gallery

References · 6

• 🔥 https://wpscan.com/vulnerability/a45c74b7-b174-479f-9681-464601b082df · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9710 · Security Note
• https://t.me/cveNotify/137458 · Telegram Post
• https://t.me/cveNotify/137561 · Telegram Post
• https://twitter.com/CVEnew/status/1975084414158921776 · Twitter Post
• https://t.me/CVEtracker/34212 · Telegram Post