GhozyLab
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Gallery Lightbox | 2 | – | Sep 22, 2025 |
| Image Slider Widget | 2 | – | Oct 5, 2026 |
| Popup Builder | 2 | – | Apr 24, 2025 |
| Gallery for Social Photo | 2 | – | Mar 25, 2025 |
| Image Slider | 1 | – | Jul 18, 2022 |
| Easy Contact Form Lite | 1 | – | Feb 25, 2025 |
| WP Composer – The Easiest Page Builder | 1 | – | Sep 19, 2026 |
| Easy Notify Lite | 1 | – | Dec 13, 2025 |
| Gallery – Photo Albums Plugin | 1 | – | Mar 31, 2025 |
| Image Carousel | 1 | – | Jun 26, 2026 |
Exploited and recent CVEs
- CVE-2026-42700 WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-2422 WP Composer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode 0.4%
- CVE-2025-68074 WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-14446 Popup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset 0.3%
- CVE-2025-57966 WordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-46230 WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability 0.8%
- CVE-2025-31586 WordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-26742 WordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-26962 WordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-26882 WordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-47623 WordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32707 WordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2022-2224 Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication 0.4%
- CVE-2022-2223 Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication 0.4%