CVE-2024-34559highCWE-532

CVE-2024-34559: high-severity vulnerability in Ghost

WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability

Published · Updated

Follow this CVE+ Monitor Ghost

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.7%
Insertion of Sensitive Information into Log File vulnerability in Ghost Foundation Ghost.This issue affects Ghost: from n/a through 1.4.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Ghost Foundation · Ghost
Related CVEs — Ghost

In the same product, most dangerous first.

CVE-2022-41697MEDIUMCVE-2022-41697EPSS 20.0%CVE-2022-41654CRITICALCVE-2022-41654EPSS 18.9%CVE-2022-47197CRITICALCVE-2022-47197EPSS 1.0%CVE-2022-47194CRITICALCVE-2022-47194EPSS 0.8%CVE-2022-47196CRITICALCVE-2022-47196EPSS 0.7%CVE-2022-47195CRITICALCVE-2022-47195EPSS 0.7%