gothamdev
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Gotham Block Extra Light | 2 | – | Jan 14, 2026 |
Exploited and recent CVEs
- CVE-2025-15021 Gotham Block Extra Light <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings 0.2%
- CVE-2025-15020 Gotham Block Extra Light <= 1.5.0 - Authenticated (Contributor+) Arbitrary File Read via 'ghostban' Shortcode 0.4%