G
Vendor security profile
Ghost
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs78
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
78toplam CVE
Uncertain78 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
78Unknown
Latest vulnerabilities
3.8
CVE-2026-105683Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
Patch status unknownEPSS %0
2.7
CVE-2026-105682Ghost: Server-Side Request Forgery in Webhook Trigger
Patch status unknownEPSS %0
6.5
CVE-2026-105681Ghost: Authorization Bypass in Comments Feature
Patch status unknownEPSS %0
6.5
CVE-2026-105680Ghost: Authorization Issue Allowed Author Role to Delete any Post
Patch verifiedEPSS %0
7.3
CVE-2026-105679Ghost: Stored XSS via File Uploads on Local Storage
Patch status unknownEPSS %0
4.3
CVE-2026-105678Ghost: Editors Could Promote Staff Users to Their Own Role
Patch status unknownEPSS %0
7.2
CVE-2026-105677Ghost: Remote Code Execution via Theme Translation Files
Patch status unknownEPSS %1
4.9
CVE-2026-105676Ghost: Path Traversal via Locale Setting
Patch status unknownEPSS %0
7.5
CVE-2026-105675Ghost: Invite Token Disclosure in Ghost Admin API
Patch status unknownEPSS %0
3.1
CVE-2026-105652Ghost: Password Hash Ordering Disclosure in Ghost Admin API
Patch status unknownEPSS %0