Nk vulnerabilities
5 vulnerabilities
Known vulnerabilities in Nk products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Ghost Kit2 vulnerabilities
- Docspress1 vulnerabilities
- Lazy Blocks1 vulnerabilities
- Visual Portfolio, Photo Gallery & Post Grid1 vulnerabilities
CVE-2025-53567nkghost kit+1
EPSS score0.56%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Ghost Kit ghostkit allows PHP Local File Inclusion.This issue affects Ghost Kit: from n/a through <= 3.4.1.CVE-2025-58258nklazy blocks+1EPSS score0.26%
Missing Authorization vulnerability in nK Lazy Blocks lazy-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lazy Blocks: from n/a through <= 4.1.0.CVE-2025-49240nkdocspress+1EPSS score0.30%
Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DocsPress: from n/a through <= 2.5.2.CVE-2026-57651nkghost kit+1EPSS score0.22%
Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.CVE-2026-32537nkvisual portfolio, photo gallery & post grid+1EPSS score0.53%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Visual Portfolio, Photo Gallery & Post Grid visual-portfolio allows PHP Local File Inclusion.This issue affects Visual Portfolio, Photo Gallery & Post Grid: from n/a through <= 3.5.1.