Vulnerabilities / Ghost Kit – Page Builder Blocks, Motion Effects & Extensions
Ghost Kit – Page Builder Blocks, Motion Effects & Extensions vulnerabilities
Advisories WPSec published for Block Animations, Motion & Scroll Effects – Ghost Kit. Other sources may list more. Its attack surface: Ghost Kit – Page Builder Blocks, Motion Effects & Extensions on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-25 | WPSEC-2026-1639 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions <= 3.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Global Custom JavaScript | Medium 4.4 | 3.8.0 |
| 2026-10-25 | WPSEC-2026-1638 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions <= 3.7.2 - Unauthenticated Information Exposure via Attachment Image REST Endpoint | Medium 5.3 | 3.8.0 |
| 2026-10-25 | WPSEC-2026-1637 | Ghost Kit – Page Builder Blocks, Motion Effects & Extensions <= 3.7.2 - Unauthenticated Sensitive Information Exposure via Templates REST API Endpoints | Medium 5.3 | 3.8.0 |
License: CC BY 4.0