Login Request a demo
TR
Vendor
TryGhost
2 products with CVEs on record
73
CVEs
0
On KEV
54
New 30D
Products
GH
Ghost
TryGhost
9.6
72 CVEs0 on KEV54 new
GH
Ghost-CLI
TryGhost
3.7
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-105683
GH
Ghost
TryGhost
3.8
0%
Oct 5Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
CVE-2026-105682
GH
Ghost
TryGhost
2.7
0%
Oct 5Ghost: Server-Side Request Forgery in Webhook Trigger
CVE-2026-105681
GH
Ghost
TryGhost
6.5
0%
Oct 5Ghost: Authorization Bypass in Comments Feature
CVE-2026-105680
GH
Ghost
TryGhost
6.5
0%
Oct 5Ghost: Authorization Issue Allowed Author Role to Delete any Post
CVE-2026-105679
GH
Ghost
TryGhost
7.3
0%
Oct 5Ghost: Stored XSS via File Uploads on Local Storage
CVE-2026-105678
GH
Ghost
TryGhost
4.3
0%
Oct 5Ghost: Editors Could Promote Staff Users to Their Own Role
CVE-2026-105677
GH
Ghost
TryGhost
7.2
1%
Oct 5Ghost: Remote Code Execution via Theme Translation Files
CVE-2026-105676
GH
Ghost
TryGhost
4.9
0%
Oct 5Ghost: Path Traversal via Locale Setting
CVE-2026-105675
GH
Ghost
TryGhost
7.5
0%
Oct 5Ghost: Invite Token Disclosure in Ghost Admin API
CVE-2026-105652
GH
Ghost
TryGhost
3.1
0%
Oct 5Ghost: Password Hash Ordering Disclosure in Ghost Admin API
CVE-2026-105651
GH
Ghost
TryGhost
7.3
0%
Oct 5Ghost: Stored XSS via Bookmark Card Images
CVE-2026-105650
GH
Ghost
TryGhost
8.1
0%
Oct 5Ghost: Stored XSS via oEmbed Photo Responses
CVE-2026-105649
GH
Ghost
TryGhost
7.3
0%
Oct 5Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
CVE-2026-105648
GH
Ghost
TryGhost
4.0
0%
Oct 5Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses
CVE-2026-105647
GH
Ghost
TryGhost
4.0
0%
Oct 5Ghost: Server-Side Request Forgery in Bookmark Fetching
CVE-2026-105646
GH
Ghost
TryGhost
4.9
0%
Oct 5Ghost: Regular Expression Denial of Service in Content Import
CVE-2026-105645
GH
Ghost
TryGhost
4.9
0%
Oct 5Ghost: Regular Expression Denial of Service in External Media Inliner
CVE-2026-105644
GH
Ghost
TryGhost
6.8
0%
Oct 5Ghost: Stored XSS via SVG Files in Content Imports
CVE-2026-105643
GH
Ghost
TryGhost
7.3
0%
Oct 5Ghost: Stored XSS via Embed Card Previews
CVE-2026-105642
GH
Ghost
TryGhost
8.8
0%
Oct 5Ghost: Remote Code Execution via Bookmark Card Images
CVE-2026-104418
GH
Ghost
TryGhost
7.2
1%
Oct 2Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files
CVE-2026-104417
GH
Ghost
TryGhost
4.9
0%
Oct 2Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting
CVE-2026-104416
GH
Ghost
TryGhost
7.5
0%
Oct 2Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API
CVE-2026-104415
GH
Ghost
TryGhost
3.1
0%
Oct 2Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API
CVE-2026-104414
GH
Ghost
TryGhost
8.1
0%
Oct 2Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses
CVE-2026-104413
GH
Ghost
TryGhost
7.3
0%
Oct 2Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images
CVE-2026-104412
GH
Ghost
TryGhost
4.3
0%
Oct 2Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment
CVE-2026-104411
GH
Ghost
TryGhost
7.3
0%
Oct 2Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads
CVE-2026-103292
GH
Ghost
TryGhost
8.0
0%
Oct 1Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head
CVE-2026-103291
GH
Ghost
TryGhost
6.4
0%
Oct 1Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch
CVE-2026-103290
GH
Ghost
TryGhost
3.8
0%
Oct 1Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize
CVE-2026-103289
GH
Ghost
TryGhost
6.5
0%
Oct 1Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments
CVE-2026-103288
GH
Ghost
TryGhost
6.5
0%
Oct 1Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like
CVE-2026-103287
GH
Ghost
TryGhost
2.7
0%
Oct 1Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook
CVE-2026-103286
GH
Ghost
TryGhost
7.3
0%
Oct 1Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications
CVE-2026-103285
GH
Ghost
TryGhost
4.3
0%
Oct 1Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery
CVE-2026-103284
GH
Ghost
TryGhost
4.3
0%
Oct 1Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedback
CVE-2026-103283
GH
Ghost
TryGhost
8.1
0%
Oct 1Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling
CVE-2026-103282
GH
Ghost
TryGhost
4.3
0%
Oct 1Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token
CVE-2026-103281
GH
Ghost
TryGhost
5.4
0%
Oct 1Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API
CVE-2026-103280
GH
Ghost
TryGhost
5.3
0%
Oct 1Ghost 0.8.0 before 6.23.0 Information Disclosure via Setup Endpoint
CVE-2026-103279
GH
Ghost
TryGhost
6.8
0%
Oct 1Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass
CVE-2026-103278
GH
Ghost
TryGhost
7.3
0%
Oct 1Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe
CVE-2026-103277
GH
Ghost
TryGhost
8.1
0%
Oct 1Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed
CVE-2026-103276
GH
Ghost
TryGhost
5.3
0%
Oct 1Ghost before 6.20.0 File Read via URL Encoding Bypass
CVE-2026-103275
GH
Ghost
TryGhost
4.3
0%
Oct 1Ghost 5.42.2 before 6.58.0 Password Hash Disclosure
CVE-2026-103274
GH
Ghost
TryGhost
5.3
0%
Oct 1Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Read
CVE-2026-103273
GH
Ghost
TryGhost
4.3
0%
Oct 1Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token
CVE-2026-103272
GH
Ghost
TryGhost
7.5
0%
Oct 1Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API
CVE-2026-103271
GH
Ghost
TryGhost
7.5
0%
Oct 1Ghost 4.0.0 before 6.63.0 Restricted Content Bypass
CVE-2026-103269
GH
Ghost
TryGhost
5.3
0%
Oct 1Ghost 5.3.0 before 6.62.0 Missing Authorization via Post Excerpts
CVE-2026-103268
GH
Ghost
TryGhost
8.8
0%
Oct 1Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset
CVE-2026-103267
GH
Ghost
TryGhost
4.3
0%
Oct 1Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite
CVE-2026-103266
GH
Ghost
TryGhost
7.1
0%
Oct 1Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modification
CVE-2026-70596
GH
Ghost
TryGhost
4.3
0%
Aug 5Ghost: Cross-Site Scripting in Feature Image Captions
CVE-2026-70595
GH
Ghost
TryGhost
4.0
0%
Aug 5Ghost: Server-Side Request Forgery Mitigation Issue
CVE-2026-70594
GH
Ghost
TryGhost
6.7
0%
Aug 4Ghost: Session Fixation in Ghost Admin
CVE-2026-70593
GH
Ghost
TryGhost
6.6
0%
Aug 4Ghost: Theme Upload Path Traversal
CVE-2026-70592
GH
Ghost
TryGhost
5.5
0%
Aug 4Ghost: Database Backup Path Traversal
CVE-2026-70591
GH
Ghost
TryGhost
4.1
0%
Aug 4Ghost: Server-Side Request Forgery in Image Fetching