2.4.6

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-23	CVE-2024-43924	Missing Authorization vulnerability in Dfactory Responsive Lightbox Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7. network low complexity dfactory CWE-862 critical	9.8
2024-08-22	CVE-2024-6870	Cross-site Scripting vulnerability in Dfactory Responsive Lightbox The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping affecting the rl_upload_image AJAX endpoint. network low complexity dfactory CWE-79	5.4