GhostPool

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

GhostPool records in CISA KEV

No GhostPool vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-42741 CVE-2025-69298 · GHSA-fg97-672q-6chv

WordPress Gauge theme <= 6.56.4 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gauge: from n/a through <= 6.56.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00277 Published 2026-02-20 No fix listed CWE-862

TI-2025-42740 CVE-2025-69297 · GHSA-xrpj-w92h-g66g

WordPress Aardvark Plugin plugin <= 2.19 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in GhostPool Aardvark Plugin aardvark-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aardvark Plugin: from n/a through <= 2.19.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00277 Published 2026-02-20 No fix listed CWE-862

TI-2025-42739 CVE-2025-69296 · GHSA-mvp7-2m2r-2548

WordPress Aardvark theme <= 4.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhostPool Aardvark aardvark allows Reflected XSS.This issue affects Aardvark: from n/a through <= 4.6.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00274 Published 2026-02-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0