GH
Vendor
Ghost
35
CVEs
0
On KEV
0
New 30D
Products
GH9.8
Ghost
Ghost
31 CVEs0 on KEV0 new
SQ9.8
Sqlite3
Ghost
3 CVEs0 on KEV0 new
PO6.1
Portal
Ghost
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29784 | GH Ghost Ghost | 8.8 | Mar 7 | Ghost: Incomplete CSRF protections around OTC use |
| CVE-2026-29053 | GH Ghost Ghost | 9.8 | Mar 5 | Ghost Vulnerable to Remote Code Execution via Malicious Themes |
| CVE-2026-26980 | GH Ghost Ghost | 7.5 | Feb 20 | Ghost has a SQL Injection in its Content API |
| CVE-2026-24778 | PO Portal Ghost | 6.1 | Jan 27 | Ghost vulnerable to XSS via malicious Portal preview links |
| CVE-2026-22597 | GH Ghost Ghost | 2.7 | Jan 10 | Ghost has SSRF via External Media Inliner |
| CVE-2026-22596 | GH Ghost Ghost | 7.2 | Jan 10 | Ghost has SQL Injection in Members Activity Feed |
| CVE-2026-22595 | GH Ghost Ghost | 8.1 | Jan 10 | Ghost has Staff Token permission bypass |
| CVE-2026-22594 | GH Ghost Ghost | 8.1 | Jan 10 | Ghost has Staff 2FA bypass |
| CVE-2025-9862 | GH Ghost Ghost | 6.5 | Sep 17 | Ghost 6.0.6 - SSRF via oEmbed Bookmark |
| CVE-2024-43409 | GH Ghost Ghost | 6.5 | Aug 20 | Ghost's improper authentication allows access to member information and actions |
| CVE-2024-34451 | GH Ghost Ghost | 9.1 | Jun 16 | Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values |
| CVE-2024-34448 | GH Ghost Ghost | 8.8 | May 22 | Ghost before 5.82.0 allows CSV Injection during a member CSV export |
| CVE-2024-34559 | GH Ghost Ghost | 7.5 | May 9 | WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability |
| CVE-2024-23724 | GH Ghost Ghost | 9.0 | Feb 11 | Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript… |
| CVE-2024-23725 | GH Ghost Ghost | 6.1 | Jan 21 | Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js |
| CVE-2023-40028 | GH Ghost Ghost | 6.5 | Aug 15 | Arbitrary file read via symlinks in Ghost |
| CVE-2023-31133 | GH Ghost Ghost | 7.5 | May 8 | Ghost vulnerable to disclosure of private API fields |
| CVE-2023-32235 | GH Ghost Ghost | 7.5 | May 5 | Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal |
| CVE-2020-24736 | SQ Sqlite3 Ghost | 5.5 | Apr 11 | Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script |
| CVE-2022-43441 | SQ Sqlite3 Ghost | 9.8 | Mar 16 | A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1 |
| CVE-2023-26510 | GH Ghost Ghost | 5.7 | Mar 5 | Ghost 5.35.0 allows authorization bypass: contributors can view draft posts of other users, which is arguably inconsistent with a security policy in which a contributor's draft… |
| CVE-2022-47197 | GH Ghost Ghost | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 |
| CVE-2022-47196 | GH Ghost Ghost | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 |
| CVE-2022-47195 | GH Ghost Ghost | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 |
| CVE-2022-47194 | GH Ghost Ghost | 5.4 | Jan 19 | An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4 |
| CVE-2022-41697 | GH Ghost Ghost | 5.3 | Dec 22 | A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4 |
| CVE-2022-41654 | GH Ghost Ghost | 4.3 | Dec 22 | An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4 |
| CVE-2022-21227 | SQ Sqlite3 Ghost | 7.5 | May 1 | The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter |
| CVE-2022-28397 | GH Ghost Ghost | 9.8 | Apr 12 | An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file |
| CVE-2022-27139 | GH Ghost Ghost | 9.8 | Apr 12 | An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file |
| CVE-2021-39192 | GH Ghost Ghost | 7.2 | Sep 3 | Ghost is a Node.js content management system |
| CVE-2021-29484 | GH Ghost Ghost | 6.8 | Apr 29 | Ghost is a Node.js CMS |
| CVE-2020-8134 | GH Ghost Ghost | 8.1 | Mar 20 | Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems |
| CVE-2016-10983 | GH Ghost Ghost | 6.5 | Sep 17 | The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data |