A vulnerability classified as critical was found in Responsive Lightbox & Gallery Plugin up to 2.5.3 on WordPress. Affected is the function
get_image_size_by_url. The manipulation results in server-side request forgery.
This vulnerability is reported as CVE-2025-12359. The attack can be launched remotely. No exploit exists.