_nK

Products

Product	CVEs	Exploited	Latest
Ghost Kit	2	–	Jun 26, 2026
DocsPress	1	–	Jun 6, 2025
Lazy Blocks	1	–	Sep 22, 2025
nK Themes Helper	1	–	Jan 8, 2026
Visual Portfolio, Photo Gallery & Post Grid	1	–	Mar 25, 2026

CVE-2026-57651 Medium 6.5 WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-32537 High 7.5 WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability 0.3%
CVE-2025-22726 Medium 6.4 WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2025-58258 Medium 4.3 WordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access Control Vulnerability 0.3%
CVE-2025-53567 High 8.1 WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability 0.6%
CVE-2025-49240 Medium 4.3 WordPress DocsPress plugin <= 2.5.2 - Broken Access Control Vulnerability 0.3%