Ghost Foundation vulnerabilities
9 published CVEs name Ghost Foundation among the affected products.
- 9Published CVEs9 of them scored
- 1Last 12 monthspublished in the last year
- 5Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-72596
Ghost Foundation Ghost - Broken Access Control
Ghost Foundation · Ghost
High8.1 - CVE-2024-34559
WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability
Ghost Foundation · Ghost
High7.5 - CVE-2022-43441
A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can…
Ghost Foundation · node-sqlite3
High8.1 - CVE-2022-47197
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…
Ghost Foundation · Ghost
Critical9.0 - CVE-2022-47196
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…
Ghost Foundation · Ghost
Critical9.0 - CVE-2022-47195
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…
Ghost Foundation · Ghost
Critical9.0 - CVE-2022-47194
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…
Ghost Foundation · Ghost
Critical9.0 - CVE-2022-41697
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure…
Ghost Foundation · Ghost
Medium5.3 - CVE-2022-41654
An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request…
Ghost Foundation · Ghost
Critical9.6