Ghost Foundation vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20235
3. 20241
4. 20261

Newest CVEs

• CVE-2026-72596

  Ghost Foundation Ghost - Broken Access Control

  Ghost Foundation · Ghost

  High8.1
• CVE-2024-34559

  WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability

  Ghost Foundation · Ghost

  High7.5
• CVE-2022-43441

  A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can…

  Ghost Foundation · node-sqlite3

  High8.1
• CVE-2022-47197

  An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…

  Ghost Foundation · Ghost

  Critical9.0
• CVE-2022-47196

  An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…

  Ghost Foundation · Ghost

  Critical9.0
• CVE-2022-47195

  An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…

  Ghost Foundation · Ghost

  Critical9.0
• CVE-2022-47194

  An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow…

  Ghost Foundation · Ghost

  Critical9.0
• CVE-2022-41697

  A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure…

  Ghost Foundation · Ghost

  Medium5.3
• CVE-2022-41654

  An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request…

  Ghost Foundation · Ghost

  Critical9.6