Nk vulnerabilities

Products

• Visual Portfolio, Photo Gallery & Post Grid 5
• Ghost Kit 2

Newest

• nk ghost kit WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-57651 6.5 MediumJune 26, 2026
• nk visual portfolio, photo gallery & post grid WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability CVE-2026-32537 7.5 HighMarch 25, 2026
• nk lazy blocks WordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access Control Vulnerability CVE-2025-58258 4.3 MediumSeptember 22, 2025
• nk ghost kit WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability CVE-2025-53567 8.1 HighAugust 20, 2025
• nk docspress WordPress DocsPress plugin <= 2.5.2 - Broken Access Control Vulnerability CVE-2025-49240 4.3 MediumJune 6, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• nk visual portfolio, photo gallery & post grid Visual Portfolio, Photo Gallery & Post Grid <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via title_tag Parameter CVE-2024-4363 6.4 MediumMay 14, 2024
• nk visual portfolio, photo gallery & post grid, visualportfolio visual portfolio\, photo gallery \& post grid +1 more Visual Portfolio < 2.19.0 - Contributor+ CSS Injection CVE-2022-2597 5.4 MediumSeptember 5, 2022
• nk visual portfolio, photo gallery & post grid, visualportfolio visual portfolio\, photo gallery \& post grid +1 more Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection CVE-2022-2543 6.1 MediumSeptember 5, 2022