Read the docs

GhozyLab

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

GhozyLab records in CISA KEV

No GhozyLab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Image Slider · all components

Priority LOW 25

The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 due to failure to properly check for the existence of a nonce in the function ewic_duplicate_slider.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00424 Published 2022-07-18 No fix listed CWE-352
Open these records in search →