GH
Vendor
GhozyLab
20
CVEs
0
On KEV
1
New 30D
Products
IS6.5
Image Slider Widget
GhozyLab
2 CVEs0 on KEV1 new
GF6.5
Gallery for Social Photo
ghozylab
3 CVEs0 on KEV0 new
PB7.5
Popup Builder
GhozyLab
3 CVEs0 on KEV0 new
CF5.4
Contact Form
Ghozylab
2 CVEs0 on KEV0 new
GL6.5
Gallery Lightbox
GhozyLab
2 CVEs0 on KEV0 new
IS5.9
Image Slider
ghozylab
2 CVEs0 on KEV0 new
EC6.5
Easy Contact Form Lite
GhozyLab
1 CVEs0 on KEV0 new
EN5.4
Easy Notify Lite
ghozylab
1 CVEs0 on KEV0 new
GP6.5
Gallery – Photo Albums Plugin
GhozyLab
1 CVEs0 on KEV0 new
GP–
Gallery - Photo Albums - Portfolio
Ghozylab
1 CVEs0 on KEV0 new
IC6.5
Image Carousel
GhozyLab
1 CVEs0 on KEV0 new
WC6.4
WP Composer – The Easiest Page Builder
ghozylab
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-42700 | IS Image Slider Widget GhozyLab | 6.5 | Oct 5 | WordPress Image Slider Widget plugin <= 1.1.130 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-2422 | WC WP Composer – The Easiest Page Builder ghozylab | 6.4 | Sep 19 | WP Composer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode |
| CVE-2025-68074 | IC Image Carousel GhozyLab | 6.5 | Jun 26 | WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-14446 | EN Easy Notify Lite ghozylab | 5.4 | Dec 13 | Popup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset |
| CVE-2025-57966 | GL Gallery Lightbox GhozyLab | 6.5 | Sep 22 | WordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-5730 | CF Contact Form Ghozylab | 4.3 | Jun 30 | Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS |
| CVE-2025-46230 | PB Popup Builder GhozyLab | 7.5 | Apr 24 | WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability |
| CVE-2025-31586 | GP Gallery – Photo Albums Plugin GhozyLab | 6.5 | Mar 31 | WordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26742 | GF Gallery for Social Photo GhozyLab | 6.5 | Mar 25 | WordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26962 | EC Easy Contact Form Lite GhozyLab | 6.5 | Feb 25 | WordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26882 | PB Popup Builder GhozyLab | 6.5 | Feb 25 | WordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-47623 | GL Gallery Lightbox GhozyLab | 5.9 | Oct 5 | WordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-3236 | PB Popup Builder Ghozylab | 5.4 | Jun 17 | Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS |
| CVE-2024-32707 | IS Image Slider Widget GhozyLab | 5.9 | Apr 24 | WordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-32147 | CF Contact Form Ghozylab | 5.4 | Apr 15 | WordPress Contact Form Plugin plugin <= 1.1.23 - Cross Site Scripting (XSS) vulnerability |
| CVE-2022-2224 | GF Gallery for Social Photo ghozylab | 4.3 | Jul 18 | Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication |
| CVE-2022-2223 | IS Image Slider ghozylab | 4.3 | Jul 18 | Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication |
| CVE-2015-7386 | GP Gallery - Photo Albums - Portfolio Ghozylab | – | Sep 28 | Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated… |