Feed live

ghost CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,132

All time

Critical · Active

11,967

CVSS ≥ 9.0

New · 14 days

2,669

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 31–59 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-7462	medium	5.3/10	Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference	Jul 12, 2025 1y ago
CVE-2025-23988	high	7.1/10	WordPress ghostwriter theme <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability	May 19, 2025 1y ago
CVE-2025-3561	medium	5.3/10	ghostxbh uzy-ssm-mall cross-site request forgery	Apr 14, 2025 1y ago
CVE-2025-3560	medium	5.1/10	ghostxbh uzy-ssm-mall product cross site scripting	Apr 14, 2025 1y ago
CVE-2025-3559	medium	5.3/10	ghostxbh uzy-ssm-mall 20 ForeProductListController sql injection	Apr 14, 2025 1y ago
CVE-2025-3558	medium	5.3/10	ghostxbh uzy-ssm-mall uploadUserHeadImage unrestricted upload	Apr 14, 2025 1y ago
CVE-2025-26909	critical	9.6/10	WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability	Mar 27, 2025 1y ago
CVE-2025-2056	high	7.5/10	WP Ghost <= 5.4.01 - Unauthenticated Limited File Read	Mar 14, 2025 1y ago
CVE-2025-27092	high	8.7/10	Path Traversal Vulnerability in GHOSTS Photo Retrieval Endpoint	Feb 19, 2025 1y ago
CVE-2024-13794	medium	5.3/10	Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure	Feb 12, 2025 1y ago
CVE-2024-56803	medium	5.1/10	Ghostty improperly handles window title sequences which can lead to arbitrary command execution	Dec 31, 2024 1y ago
CVE-2024-10825	medium	6.1/10	Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL	Nov 15, 2024 1y ago
CVE-2024-43409	medium	6.5/10	Ghost's improper authentication allows access to member information and actions	Aug 20, 2024 2y ago
CVE-2024-6420	—	—	Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure	Jul 23, 2024 2y ago
CVE-2023-34001	medium	5.3/10	WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2024-34559	high	7.5/10	WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability	May 9, 2024 2y ago
CVE-2024-2193	—	—	Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.	Mar 15, 2024 2y ago
CVE-2023-4042	medium	5.5/10	Ghostscript: incomplete fix for cve-2020-16305	Aug 23, 2023 3y ago
CVE-2023-40028	medium	4.9/10	Arbitrary file read via symlinks in Ghost	Aug 15, 2023 3y ago
CVE-2023-38560	medium	5.5/10	Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name	Aug 1, 2023 3y ago
CVE-2023-38559	medium	5.5/10	Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos	Aug 1, 2023 3y ago
CVE-2022-4537	medium	6.5/10	Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass	May 9, 2023 3y ago
CVE-2023-31133	high	7.5/10	Ghost vulnerable to disclosure of private API fields	May 8, 2023 3y ago
CVE-2017-20154	low	3.5/10	ghostlander Phoenixcoin main.cpp accept denial of service	Dec 30, 2022 3y ago
CVE-2020-27792	high	7.1/10	Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c	Aug 19, 2022 4y ago
CVE-2022-30699	—	—	Novel "ghost domain names" attack by updating almost expired delegation information	Aug 1, 2022 4y ago
CVE-2022-30698	—	—	Novel "ghost domain names" attack by introducing subdomain delegations	Aug 1, 2022 4y ago
CVE-2022-1350	medium	4.3/10	GhostPCL gsmchunk.c chunk_free_object memory corruption	Apr 14, 2022 4y ago
CVE-2020-3419	medium	6.5/10	Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability	Nov 18, 2020 5y ago