Login Request a demo
GH
Product
Ghost
by Ghost · last CVE Mar 7, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news4Timeline
Severity mix
Critical 5High 11Medium 14Low 1
Severity
All severities31Critical5High11Medium14Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ghost to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29484
6.8
8%
Apr 29
Ghost is a Node.js CMS
Affected: 4.0.0 before 4.3.3
CVE-2025-9862
6.5
1%
Sep 17
Ghost 6.0.6 - SSRF via oEmbed Bookmark
Affected: 6.0.0 through 6.0.8; 5.99.0 through 5.130.3
CVE-2024-43409
6.5
0%
Aug 20
Ghost's improper authentication allows access to member information and actions
Affected: 4.46.0 before 5.89.5
CVE-2023-40028
6.5
69%
Aug 15
Arbitrary file read via symlinks in Ghost
Affected: before 5.59.1
CVE-2016-10983
6.5
2%
Sep 17
The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data
Affected: before 0.5.6
CVE-2026-24778
6.1
0%
Jan 27
Ghost vulnerable to XSS via malicious Portal preview links
Affected: 5.43.0 before 5.121.0; 6.0.0 before 6.15.0
CVE-2024-23725
6.1
0%
Jan 21
Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js
Affected: before 5.76.0
CVE-2023-26510
5.7
1%
Mar 5
Ghost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent with a security policy in which a contributor's draft…
Affected: 5.35.0
CVE-2022-47197
5.4
1%
Jan 19
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4
Affected: 5.9.4
CVE-2022-47196
5.4
1%
Jan 19
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4
Affected: 5.9.4
CVE-2022-47195
5.4
1%
Jan 19
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4
Affected: 5.9.4
CVE-2022-47194
5.4
1%
Jan 19
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4
Affected: 5.9.4
CVE-2022-41697
5.3
20%
Dec 22
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4
Affected: 5.9.4
CVE-2022-41654
4.3
19%
Dec 22
An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4
Affected: 4.46.0 before 4.48.8; 5.0.0 before 5.22.7
Showing 14