GhostPool vulnerabilities

🔔 Create alert RSS

Published CVEs affecting GhostPool products: 3 record(s), with severity, exploitation and fixes.

Aardvark 1 Aardvark Plugin 1 Gauge 1

Exploited only (KEV) →

CVE-2025-69298 High · 7.5 CWE-862 Feb 20, 2026

WordPress Gauge theme <= 6.56.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gauge: from n/a through <= 6.56.4.

CVE-2025-69297 High · 7.5 CWE-862 Feb 20, 2026

WordPress Aardvark Plugin plugin <= 2.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in GhostPool Aardvark Plugin aardvark-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aardvark Plugin: from n/a through <= 2.19.

CVE-2025-69296 High · 7.1 CWE-79 Feb 20, 2026

WordPress Aardvark theme <= 4.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhostPool Aardvark aardvark allows Reflected XSS.This issue affects Aardvark: from n/a through <= 4.6.3.