GH
Product
Ghost
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 14Low 1
Watch
Add Ghost to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29053 | 9.8 | Mar 5 | Ghost Vulnerable to Remote Code Execution via Malicious Themes Affected: 0.7.2 before 6.19.1 |
| CVE-2022-28397 | 9.8 | Apr 12 | An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file Affected: 4.42.0 |
| CVE-2022-27139 | 9.8 | Apr 12 | An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file Affected: 4.39.0 |
| CVE-2024-34451 | 9.1 | Jun 16 | Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values Affected: through 5.85.1 |
| CVE-2024-23724 | 9.0 | Feb 11 | Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript… Affected: through 5.76.0 |
| CVE-2026-29784 | 8.8 | Mar 7 | Ghost: Incomplete CSRF protections around OTC use Affected: 5.101.6 before 6.19.3 |
| CVE-2024-34448 | 8.8 | May 22 | Ghost before 5.82.0 allows CSV Injection during a member CSV export Affected: before 5.82.0 |
| CVE-2026-22595 | 8.1 | Jan 10 | Ghost has Staff Token permission bypass Affected: 5.121.0 before 5.130.6; 6.0.0 before 6.11.0 |
| CVE-2026-22594 | 8.1 | Jan 10 | Ghost has Staff 2FA bypass Affected: 5.105.0 before 5.130.6; 6.0.0 before 6.11.0 |
| CVE-2020-8134 | 8.1 | Mar 20 | Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems Affected: before 3.10.0 |
| CVE-2026-26980 | 7.5 | Feb 20 | Ghost has a SQL Injection in its Content API Affected: 3.24.0 before 6.19.1 |
| CVE-2024-34559 | 7.5 | May 9 | WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability Affected: through 1.4.0 |
| CVE-2023-31133 | 7.5 | May 8 | Ghost vulnerable to disclosure of private API fields Affected: before 5.46.1 |
| CVE-2023-32235 | 7.5 | May 5 | Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal Affected: before 5.42.1 |
| CVE-2026-22596 | 7.2 | Jan 10 | Ghost has SQL Injection in Members Activity Feed Affected: 5.90.0 before 5.130.6; 6.0.0 before 6.11.0 |
| CVE-2021-39192 | 7.2 | Sep 3 | Ghost is a Node.js content management system Affected: 4.0.0 before 4.10.0 |
| CVE-2021-29484 | 6.8 | Apr 29 | Ghost is a Node.js CMS Affected: 4.0.0 before 4.3.3 |
| CVE-2025-9862 | 6.5 | Sep 17 | Ghost 6.0.6 - SSRF via oEmbed Bookmark Affected: 6.0.0 through 6.0.8; 5.99.0 through 5.130.3 |
| CVE-2024-43409 | 6.5 | Aug 20 | Ghost's improper authentication allows access to member information and actions Affected: 4.46.0 before 5.89.5 |
| CVE-2023-40028 | 6.5 | Aug 15 | Arbitrary file read via symlinks in Ghost Affected: before 5.59.1 |
| CVE-2016-10983 | 6.5 | Sep 17 | The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data Affected: before 0.5.6 |
| CVE-2026-24778 | 6.1 | Jan 27 | Ghost vulnerable to XSS via malicious Portal preview links Affected: 5.43.0 before 5.121.0; 6.0.0 before 6.15.0 |
| CVE-2024-23725 | 6.1 | Jan 21 | Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js Affected: before 5.76.0 |
| CVE-2023-26510 | 5.7 | Mar 5 | Ghost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent with a security policy in which a contributor's draft… Affected: 5.35.0 |
| CVE-2022-47197 | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 Affected: 5.9.4 |
| CVE-2022-47196 | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 Affected: 5.9.4 |
| CVE-2022-47195 | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 Affected: 5.9.4 |
| CVE-2022-47194 | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 Affected: 5.9.4 |
| CVE-2022-41697 | 5.3 | Dec 22 | A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4 Affected: 5.9.4 |
| CVE-2022-41654 | 4.3 | Dec 22 | An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4 Affected: 4.46.0 before 4.48.8; 5.0.0 before 5.22.7 |
| CVE-2026-22597 | 2.7 | Jan 10 | Ghost has SSRF via External Media Inliner Affected: 5.38.0 before 5.130.6; 6.0.0 before 6.11.0 |
Showing 31