Approved changes feed: RSS · Atom

cpe:2.3:a:nk:ghost_kit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNk (f4a05192-1548-5934-8f0e-7edd39f9ae5a)
ProductGhost Kit (4a611233-0922-5992-8900-c11886ab4f03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57651 vulnerable 2026-07-29 01:03:15.818012 WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.
Published: 2026-06-26T14:53:22.279Z
Updated: 2026-06-26T17:42:21.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53567 vulnerable 2026-06-08 07:31:14.717519 WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability
HIGH (8.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Ghost Kit ghostkit allows PHP Local File Inclusion.This issue affects Ghost Kit: from n/a through <= 3.4.1.
Published: 2025-08-20T08:03:11.051Z
Updated: 2026-04-28T16:13:26.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.