Nko

5 CVEs across 4 Nko products. Browse Nko vulnerabilities, severities, and proof-of-concept exploits.

Nko products with known CVEs

ProductCVEs
Visual Portfolio, Photo Gallery & Post Grid2
Advanced WordPress Backgrounds1
Custom Block Builder – Lazy Blocks1
Ghost Kit – Page Builder Blocks, Motion Effects & Extensions1
Nko CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1560High8.82026-02-11The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.0 via multiple fun…
CVE-2025-9992Medium6.42025-09-18The Ghost Kit – Page Builder Blocks, Motion Effects & Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS field in a…
CVE-2024-5020Medium6.42024-12-04Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in…
CVE-2024-8045Medium6.42024-09-11The Advanced WordPress Backgrounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘imageTag’ parameter in all versions up to, and in…
CVE-2024-4363Medium6.42024-05-15The Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions…