CVE-2026-2479 | Responsive Lightbox & Gallery Plugin up to 2.7.1 on WordPress strpos server-side request forgery

A vulnerability categorized as critical has been discovered in Responsive Lightbox & Gallery Plugin up to 2.7.1 on WordPress. The impacted element is the function strpos. Such manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-2479. The attack may be launched remotely. There is no exploit available.