Ghost Foundation

Products

Exploited and recent CVEs

• CVE-2026-72596 High 8.1 Ghost Foundation Ghost - Broken Access Control 0.4%
• CVE-2024-34559 High 7.5 WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability 0.7%
• CVE-2022-43441 High 8.1 A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attac 2.4%
• CVE-2022-47197 Critical 9.0 An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript 1.0%
• CVE-2022-47196 Critical 9.0 An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript 0.7%
• CVE-2022-47195 Critical 9.0 An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript 0.7%
• CVE-2022-47194 Critical 9.0 An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript 0.8%
• CVE-2022-41654 Critical 9.6 An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to increased privileges. An attack 18.9%
• CVE-2022-41697 Medium 5.3 A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can 20.0%