nko
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Visual Portfolio, Photo Gallery & Post Grid | 2 | – | Dec 4, 2024 |
| Advanced WordPress Backgrounds | 1 | – | Sep 11, 2024 |
| Custom Block Builder – Lazy Blocks | 1 | – | Feb 11, 2026 |
| Ghost Kit – Page Builder Blocks, Motion Effects & Extensions | 1 | – | Sep 18, 2025 |
Exploited and recent CVEs
- CVE-2026-1560 Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution 9.4%
- CVE-2025-9992 Ghost Kit <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-5020 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
- CVE-2024-8045 Advanced WordPress Backgrounds <= 1.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via imageTag Parameter 0.3%
- CVE-2024-4363 Visual Portfolio, Photo Gallery & Post Grid <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via title_tag Parameter 0.4%