Vulnerabilities in GhozyLab
12 resultsVexday analysis
GhozyLab registra 9 vulnerabilidades no ecossistema, sem incidentes de exploração ativa documentada (KEV zero) e nenhuma classificação crítica por CVSS. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, com apenas 1 divulgação nos últimos 90 dias, indicando risco contido e não imediato.
CVE-2025-46230HIGHWordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion VulnerabilityEPSS 0.7%CVE-2022-2224MEDIUMGallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post DuplicationEPSS 0.4%CVE-2022-2223MEDIUMImage Slider <= 1.1.121 - Cross-Site Request Forgery to Post DuplicationEPSS 0.4%CVE-2024-32707MEDIUMWordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26882MEDIUMWordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-57966MEDIUMWordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-14446MEDIUMPopup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings ResetEPSS 0.2%CVE-2024-47623MEDIUMWordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26962MEDIUMWordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31586MEDIUMWordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26742MEDIUMWordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68074MEDIUMWordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%