GH
Product
Ghost
74
CVEs
0
On KEV
9.8
Max CVSS
54
New 30D
Severity mix
Critical 2High 24Medium 42Low 6
Watch
Add Ghost to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105644 | 6.8 | Oct 5 | Ghost: Stored XSS via SVG Files in Content Imports Affected: >= 4.0.0, < 6.67.0 |
| CVE-2026-103279 | 6.8 | Oct 1 | Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass Affected: 3.10.0 before 6.34.0 |
| CVE-2026-70594 | 6.7 | Aug 4 | Ghost: Session Fixation in Ghost Admin Affected: >= 2.2.0, < 6.54.1 |
| CVE-2026-70593 | 6.6 | Aug 4 | Ghost: Theme Upload Path Traversal Affected: >= 0.10.0, < 6.54.1 |
| CVE-2026-105681 | 6.5 | Oct 5 | Ghost: Authorization Bypass in Comments Feature Affected: >= 5.9.0, < 6.44.1 |
| CVE-2026-105680 | 6.5 | Oct 5 | Ghost: Authorization Issue Allowed Author Role to Delete any Post Affected: >= 5.81.0, < 6.60.0 |
| CVE-2026-103289 | 6.5 | Oct 1 | Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments Affected: 5.9.0 before 6.44.1 |
| CVE-2026-103288 | 6.5 | Oct 1 | Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like Affected: 5.9.0 before 6.44.1 |
| CVE-2026-103291 | 6.4 | Oct 1 | Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch Affected: 3.20.2 before 6.51.0 |
| CVE-2026-53944 | 5.8 | Jun 24 | Ghost: Private IP filtering bypass to make server-side requests to internal services Affected: >= 6.0.9, < 6.21.1 |
| CVE-2026-70592 | 5.5 | Aug 4 | Ghost: Database Backup Path Traversal Affected: >= 1.20.1, < 6.54.1 |
| CVE-2026-103281 | 5.4 | Oct 1 | Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API Affected: 3.23.0 before 6.23.0 |
| CVE-2026-53946 | 5.4 | Jun 24 | Ghost: Mobiledoc image-size fetch SSRF Affected: >= 6.19.4, < 6.21.1 |
| CVE-2026-53948 | 5.4 | Jun 24 | Ghost: File Upload Content-Type Spoofing Affected: >= 6.19.4, < 6.21.1 |
| CVE-2026-103280 | 5.3 | Oct 1 | Ghost 0.8.0 before 6.23.0 Information Disclosure via Setup Endpoint Affected: 0.8.0 before 6.23.0 |
| CVE-2026-103276 | 5.3 | Oct 1 | Ghost before 6.20.0 File Read via URL Encoding Bypass Affected: before 6.20.0 |
| CVE-2026-103274 | 5.3 | Oct 1 | Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Read Affected: 5.3.0 before 6.58.0 |
| CVE-2026-103269 | 5.3 | Oct 1 | Ghost 5.3.0 before 6.62.0 Missing Authorization via Post Excerpts Affected: 5.3.0 before 6.62.0 |
| CVE-2026-59817 | 5.3 | Jul 9 | Ghost: Paid gift memberships obtainable at minimal cost via the donations feature Affected: >= 6.27.0, < 6.44.0 |
| CVE-2026-53947 | 5.3 | Jun 24 | Ghost: Member existence leak via magic link sign-in response Affected: >= 5.18.0, < 6.21.1 |
| CVE-2026-53949 | 5.3 | Jun 24 | Ghost Content API filter bypass reveals private fields Affected: >= 5.46.1, < 6.21.2 |
| CVE-2026-70588 | 5.0 | Aug 4 | Ghost: Cross-Site Scripting in Universal Import Affected: >= 5.26.0, < 6.54.1 |
| CVE-2026-105676 | 4.9 | Oct 5 | Ghost: Path Traversal via Locale Setting Affected: >= 1.20.0, < 6.64.0 |
| CVE-2026-105646 | 4.9 | Oct 5 | Ghost: Regular Expression Denial of Service in Content Import Affected: >= 4.0.0, < 6.67.0 |
| CVE-2026-105645 | 4.9 | Oct 5 | Ghost: Regular Expression Denial of Service in External Media Inliner Affected: >= 5.37.0, < 6.67.0 |
| CVE-2026-104417 | 4.9 | Oct 2 | Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting Affected: 1.20.0 before 6.64.0 |
| CVE-2026-70590 | 4.8 | Aug 4 | Ghost: Blind Password Hash Disclosure in Ghost Admin API Affected: < 6.54.1 |
| CVE-2026-70589 | 4.8 | Aug 4 | Ghost: Archived Offers can be Redeemed Affected: >= 4.22.0, < 6.54.1 |
| CVE-2026-105678 | 4.3 | Oct 5 | Ghost: Editors Could Promote Staff Users to Their Own Role Affected: >= 0.5.0, < 6.64.0 |
| CVE-2026-104412 | 4.3 | Oct 2 | Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment Affected: 0.5.0 before 6.64.0 |
| CVE-2026-103285 | 4.3 | Oct 1 | Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery Affected: 5.19.0 before 6.57.1 |
| CVE-2026-103284 | 4.3 | Oct 1 | Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedback Affected: 5.125.1 before 6.57.1 |
| CVE-2026-103282 | 4.3 | Oct 1 | Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token Affected: 0.5.0 before 6.23.0 |
| CVE-2026-103275 | 4.3 | Oct 1 | Ghost 5.42.2 before 6.58.0 Password Hash Disclosure Affected: 5.42.2 before 6.58.0 |
| CVE-2026-103273 | 4.3 | Oct 1 | Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token Affected: 4.3.0 before 6.58.0 |
| CVE-2026-103267 | 4.3 | Oct 1 | Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite Affected: 0.5.0 before 6.62.0 |
| CVE-2026-70596 | 4.3 | Aug 5 | Ghost: Cross-Site Scripting in Feature Image Captions Affected: >= 4.9.0, < 6.54.1 |
| CVE-2026-70591 | 4.1 | Aug 4 | Ghost: Server-Side Request Forgery in Image Fetching Affected: >= 0.10.0, < 6.54.1 |
| CVE-2026-105648 | 4.0 | Oct 5 | Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses Affected: >= 6.0.9, < 6.65.0 |
| CVE-2026-105647 | 4.0 | Oct 5 | Ghost: Server-Side Request Forgery in Bookmark Fetching Affected: >= 6.54.1, < 6.65.0 |
| CVE-2026-70595 | 4.0 | Aug 5 | Ghost: Server-Side Request Forgery Mitigation Issue Affected: >= 6.26.0, < 6.54.1 |
| CVE-2026-53945 | 4.0 | Jun 24 | Ghost: Server-side request forgery via DNS rebinding in external request handling Affected: >= 6.0.9, < 6.21.1 |
Showing 42