Skip to content
Ghozylab vulnerabilities
Newest
-
ghozylab gallery for social photo
Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter
CVE-2026-105967
5.8 Medium
-
ghozylab popup builder
Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter
CVE-2026-112230
3.7 Low
-
ghozylab image slider widget
WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42700
6.5 Medium
-
ghozylab wp composer – the easiest page builder
WP Composer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode
CVE-2026-2422
6.4 Medium
-
ghozylab image carousel
WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68074
6.5 Medium
-
ghozylab popup builder
WordPress Popup Builder 3.49 Persistent Cross-Site Scripting
CVE-2019-25744
5.1 Medium
-
ghozylab easy notify lite
Popup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset
CVE-2025-14446
5.4 Medium
-
ghozylab gallery lightbox
WordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57966
6.5 Medium
-
ghozylab contact form, unknown contact form plugin +1 more
Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS
CVE-2025-5730
4.3 Medium
-
ghozylab popup builder
WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability
CVE-2025-46230
7.5 High
-
ghozylab gallery – photo albums plugin
WordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-31586
6.5 Medium
-
ghozylab gallery for social photo
WordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26742
6.5 Medium
-
ghozylab easy contact form lite
WordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26962
6.5 Medium
-
ghozylab popup builder
WordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26882
6.5 Medium
-
ghozylab popup builder
Popup Builder < 4.3.5 - Admin+ Stored XSS
CVE-2024-9428
4.8 Medium
-
ghozylab gallery lightbox
WordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47623
5.9 Medium
-
ghozylab popup builder, gallery for social photo +1 more
Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS
CVE-2024-3236
5.4 Medium
-
ghozylab popup builder
WordPress Easy Notify Lite plugin <= 1.1.29 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34567
6.5 Medium
-
ghozylab image slider widget, image slider +1 more
WordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerability
CVE-2024-32707
5.9 Medium
-
form plugin team - ghozylab easy contact form lite, ghozylab contact form +1 more
WordPress Contact Form Plugin plugin <= 1.1.23 - Cross Site Scripting (XSS) vulnerability
CVE-2024-32147
6.5 Medium
-
ghozylab popup builder
WordPress Popup Builder plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-30184
6.5 Medium
-
ghozylab popup builder, popup builder builder +1 more
popup-builder < 4.2.6 - Admin+ SSRF & File Read
CVE-2023-6294
7.2 High
-
ghozylab popup builder
Popup Builder < 4.2.3 - Unauthenticated Stored XSS
CVE-2023-6000
Public exploit
6.1 Medium
-
ghozylab popup builder
Popup Builder < 4.2.0 - Admin+ Stored Cross-Site Scripting
CVE-2023-3226
4.8 Medium
-
ghozylab gallery for social photo
Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication
CVE-2022-2224
5.4 Medium
-
ghozylab image slider
Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication
CVE-2022-2223
5.4 Medium
-
ghozylab gallery - photo albums - portfolio
Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery -...
CVE-2015-7386
3.5 Low