TI-2026-41476 CVE-2026-57651 · GHSA-m7v9-h4q3-64mg
WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.
Vulnerabilities
6 records
TI-2026-25065 CVE-2026-32537 · GHSA-ppx9-7cj4-xjjh
WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability
Priority LOW 35
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Visual Portfolio, Photo Gallery & Post Grid visual-portfolio allows PHP Local File Inclusion.Thi…
TI-2025-16608 CVE-2025-22726 · GHSA-xf8h-2jhw-rgxq
WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability
Priority LOW 28
Server-Side Request Forgery (SSRF) vulnerability in _nK nK Themes Helper nk-themes-helper allows Server Side Request Forgery.This issue affects nK Themes Helper: from n/a through <= 1.7.9.
TI-2025-36063 CVE-2025-58258 · GHSA-4vfc-pmp7-jc82
WordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access Control Vulnerability
Priority LOW 20
Missing Authorization vulnerability in nK Lazy Blocks lazy-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lazy Blocks: from n/a through <= 4.1.0.
TI-2025-33504 CVE-2025-53567 · GHSA-322q-55f4-fqgr
WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Ghost Kit ghostkit allows PHP Local File Inclusion.This issue affects Ghost Kit: from n/a throug…
TI-2025-31288 CVE-2025-49240 · GHSA-q65x-6qf2-r7c9
WordPress DocsPress plugin <= 2.5.2 - Broken Access Control Vulnerability
Priority LOW 20
Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DocsPress: from n/a through <= 2.5.2.