Log in Start free

dFactory

Products

ProductCVEsExploitedLatest
Responsive Lightbox & Gallery7–Oct 10, 2026
Responsive Lightbox4–Jun 26, 2026
Download Attachments3–Apr 8, 2026
Events Maker by dFactory1–Oct 27, 2025
Image Watermark1–Apr 6, 2024
Post Views Counter1–Apr 12, 2024

Exploited and recent CVEs

  • CVE-2026-103897 Medium 4.4 Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute 0.2%
  • CVE-2026-56041 High 7.1 WordPress Responsive Lightbox plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-39616 Medium 5.3 WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-2479 Medium 5.0 Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload 0.3%
  • CVE-2025-12359 Medium 5.4 Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery 0.3%
  • CVE-2025-62941 Medium 6.5 WordPress Events Maker by dFactory plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49995 Medium 5.3 WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2024-5667 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library 0.3%
  • CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
  • CVE-2024-43924 Medium 5.3 WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability 0.5%
  • CVE-2024-49282 Medium 5.9 WordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-6870 Medium 6.4 Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload 0.3%
  • CVE-2024-31252 Medium 4.3 WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability 0.4%
  • CVE-2024-3230 Medium 6.4 Download Attachments <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-31264 Medium 4.3 WordPress Post Views Counter plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-1994 Medium 4.3 Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification 0.3%
  • CVE-2023-49174 Medium 5.9 WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS) 0.4%