Exposure of Ghost

Blogs, CMS
149
exposure score
2,997
sites use
0
exploited
7
critical

CVEs

96 results
CVE-2026-53946MEDIUMGhost: Mobiledoc image-size fetch SSRFEPSS 0.2%CVE-2026-103280MEDIUMGhost 0.8.0 before 6.23.0 Information Disclosure via Setup EndpointEPSS 0.2%CVE-2026-104415LOWGhost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin APIEPSS 0.2%CVE-2026-103288HIGHGhost 5.9.0 before 6.44.1 Authorization Bypass via Comment LikeEPSS 0.2%CVE-2026-103287MEDIUMGhost 1.18.0 before 6.27.0 Server-Side Request Forgery via WebhookEPSS 0.2%CVE-2026-26365MEDIUMAkamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming requestEPSS 0.2%CVE-2026-105678MEDIUMGhost: Editors Could Promote Staff Users to Their Own RoleEPSS 0.2%CVE-2026-104412MEDIUMGhost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role AssignmentEPSS 0.2%CVE-2026-103279HIGHGhost 3.10.0 before 6.34.0 Session Invalidation BypassEPSS 0.2%CVE-2026-29784HIGHGhost: Incomplete CSRF protections around OTC useEPSS 0.2%CVE-2026-103286HIGHGhost 2.21.0 before 6.56.0 Privilege Escalation via NotificationsEPSS 0.2%CVE-2026-103284MEDIUMGhost 5.125.1 before 6.57.1 Information Disclosure via FeedbackEPSS 0.2%CVE-2026-103281MEDIUMGhost 3.23.0 before 6.23.0 API Key Exposure via Admin APIEPSS 0.2%CVE-2026-103291MEDIUMGhost 3.20.2 before 6.51.0 SSRF via image-size fetchEPSS 0.1%CVE-2026-103282MEDIUMGhost 0.5.0 before 6.23.0 Multiple Account Creation via Invite TokenEPSS 0.1%CVE-2026-103285MEDIUMGhost 5.19.0 before 6.57.1 Cross-Site Request ForgeryEPSS 0.1%