Skip to content
OpenAdvisories

Vendor

nK

6 known vulnerabilities.

Products

Ghost Kit 2 Lazy Blocks 1 DocsPress 1 nK Themes Helper 1 Visual Portfolio, Photo Gallery & Post Grid 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57651

    WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.

    nK Ghost Kit
  • Medium 6.4
    CVE-2025-22726

    WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in _nK nK Themes Helper nk-themes-helper allows Server Side Request Forgery.This issue affects nK Themes Helper: from n/a through <= 1.7.9.

    nK nK Themes Helper
  • Medium 4.3
    CVE-2025-58258

    WordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in nK Lazy Blocks lazy-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lazy Blocks: from n/a through <= 4.1.0.

    nK Lazy Blocks
  • Medium 4.3
    CVE-2025-49240

    WordPress DocsPress plugin <= 2.5.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DocsPress: from n/a through <= 2.5.2.

    nK DocsPress