GhozyLab vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20242
3. 20257
4. 20263

Newest CVEs

• CVE-2026-42700

  WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability

  GhozyLab · Image Slider Widget

  Medium6.5
• CVE-2026-2422

  WP Composer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode

  ghozylab · WP Composer – The Easiest Page Builder

  Medium6.4
• CVE-2025-68074

  WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability

  GhozyLab · Image Carousel

  Medium6.5
• CVE-2025-14446

  Popup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset

  ghozylab · Easy Notify Lite

  Medium5.4
• CVE-2025-57966

  WordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability

  GhozyLab · Gallery Lightbox

  Medium6.5
• CVE-2025-46230

  WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability

  GhozyLab · Popup Builder

  High7.5
• CVE-2025-31586

  WordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerability

  GhozyLab · Gallery – Photo Albums Plugin

  Medium6.5
• CVE-2025-26742

  WordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerability

  GhozyLab · Gallery for Social Photo

  Medium6.5
• CVE-2025-26962

  WordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability

  GhozyLab · Easy Contact Form Lite

  Medium6.5
• CVE-2025-26882

  WordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerability

  GhozyLab · Popup Builder

  Medium6.5