Everthemess Goya vulnerabilities

• everthemess goya core WordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerability CVE-2025-68064 7.5 HighJune 26, 2026
• everthemess goya Goya <= 1.0.8.7 - Unauthenticated Reflected Cross-Site Scripting via Multiple Parameters CVE-2023-4017 6.1 MediumJune 29, 2024