Vulnerabilities in TryGhost

88 results
CVE-2026-103279HIGHGhost 3.10.0 before 6.34.0 Session Invalidation BypassEPSS 0.2%CVE-2026-103286HIGHGhost 2.21.0 before 6.56.0 Privilege Escalation via NotificationsEPSS 0.2%CVE-2026-103284MEDIUMGhost 5.125.1 before 6.57.1 Information Disclosure via FeedbackEPSS 0.2%CVE-2026-103281MEDIUMGhost 3.23.0 before 6.23.0 API Key Exposure via Admin APIEPSS 0.2%CVE-2026-103291MEDIUMGhost 3.20.2 before 6.51.0 SSRF via image-size fetchEPSS 0.1%CVE-2026-63115MEDIUMActivityPub Undo handler can unfollow or remove reposts on behalf of other accountsEPSS 0.1%CVE-2026-103282MEDIUMGhost 0.5.0 before 6.23.0 Multiple Account Creation via Invite TokenEPSS 0.1%CVE-2026-103285MEDIUMGhost 5.19.0 before 6.57.1 Cross-Site Request ForgeryEPSS 0.1%