Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

ghozylab — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting ghozylab. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Ghozylab develops security testing tools with a core focus on identifying web application vulnerabilities. Historically, their products have frequently been associated with Remote Code Execution (RCE) and Cross-Site Scripting (XSS) vulnerabilities, often stemming from improper input validation and insecure deserialization. The organization has demonstrated a pattern of privilege escalation flaws in their software. While no major public security incidents have been widely documented, the accumulation of 11 CVEs suggests consistent security challenges in their codebase, particularly around memory corruption and access control mechanisms.

CVE ID Title CVSS Severity Published
CVE-2025-68074 WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability — Image Carousel CWE-79 6.5 Medium 2026-06-26
CVE-2025-14446 Popup Builder <= 1.1.37 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset — Easy Notify Lite CWE-862 5.4 Medium 2025-12-13
CVE-2025-57966 WordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability — Gallery Lightbox CWE-79 6.5 Medium 2025-09-22
CVE-2025-46230 WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability — Popup Builder CWE-98 7.5 High 2025-04-24
CVE-2025-31586 WordPress Gallery – Photo Albums Plugin plugin <= 1.3.170 - Stored Cross Site Scripting (XSS) vulnerability — Gallery – Photo Albums Plugin CWE-79 6.5 Medium 2025-03-31
CVE-2025-26742 WordPress Gallery for Social Photo plugin <= 1.0.0.35 - Cross Site Scripting (XSS) vulnerability — Gallery for Social Photo CWE-79 6.5 Medium 2025-03-25
CVE-2025-26962 WordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability — Easy Contact Form Lite CWE-79 6.5 Medium 2025-02-25
CVE-2025-26882 WordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerability — Popup Builder CWE-79 6.5 Medium 2025-02-25
CVE-2024-47623 WordPress Gallery Lightbox plugin <= 1.0.0.39 - Cross Site Scripting (XSS) vulnerability — Gallery Lightbox CWE-79 5.9 Medium 2024-10-05
CVE-2024-32707 WordPress Image Slider plugin <= 1.1.125 - Cross Site Scripting (XSS) vulnerability — Image Slider Widget CWE-79 5.9 Medium 2024-04-24
CVE-2022-2224 Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication — Gallery for Social Photo CWE-352 5.4 Medium 2022-07-18
CVE-2022-2223 Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication — Image Slider CWE-352 5.4 Medium 2022-07-18

This page lists every published CVE security advisory associated with ghozylab. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.