Vulnerabilities in ghozylab
12 resultsVexday analysis
GhozylabDet apresenta footprint reduzido de 3 CVEs na base, nenhuma sob exploração ativa confirmada (KEV) e sem críticas catalogadas. O padrão vulnerabilidade dominante é CWE-352 (Cross-Site Request Forgery), indicando fraqueza em validação de requisições; nenhuma divulgação recente (últimos 90 dias) sugere risco maduro e potencialmente remediado.
CVE-2025-46230HIGHWordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion VulnerabilityEPSS 0.7%CVE-2022-2224MEDIUMGallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post DuplicationEPSS 0.4%CVE-2022-2223MEDIUMImage Slider <= 1.1.121 - Cross-Site Request Forgery to Post DuplicationEPSS 0.4%CVE-2024-32707MEDIUMWordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26882MEDIUMWordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-57966MEDIUMWordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-14446MEDIUMPopup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings ResetEPSS 0.2%CVE-2024-47623MEDIUMWordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26962MEDIUMWordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31586MEDIUMWordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26742MEDIUMWordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68074MEDIUMWordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%