Nko vulnerabilities

Products

• Visual Portfolio, Photo Gallery & Post Grid 2

Newest

• nko custom block builder – lazy blocks Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution CVE-2026-1560 Public exploit 8.8 HighFebruary 11, 2026
• nko ghost kit – page builder blocks, motion effects & extensions Ghost Kit <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9992 6.4 MediumSeptember 18, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• nko advanced wordpress backgrounds Advanced WordPress Backgrounds <= 1.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via imageTag Parameter CVE-2024-8045 6.4 MediumSeptember 11, 2024
• nk visual portfolio, photo gallery & post grid Visual Portfolio, Photo Gallery & Post Grid <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via title_tag Parameter CVE-2024-4363 6.4 MediumMay 14, 2024