Nk Ghost Kit vulnerabilities

2 vulnerabilities

Known vulnerabilities in Nk Ghost Kit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2025-53567nkghost kit+1
EPSS score
0.56%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Ghost Kit ghostkit allows PHP Local File Inclusion.This issue affects Ghost Kit: from n/a through <= 3.4.1.6.5CVE-2026-57651nkghost kit+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.