G
Vendor security profile
ghost
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs75
Critical2
CISA KEV0
Public exploit3
Patch rate%25
Avg. CVSS6.4
12-month vulnerability rate
0
0
1
1
1
0
0
0
1
16
0
54
CVE KEV
CVE severity distribution
75toplam CVE
Critical2 (3%)
High28 (37%)
Medium41 (55%)
Low4 (5%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%4
Public exploit
19Patch available
0Partial
0Workaround
0Vendor: no patch
56Unknown
Latest vulnerabilities
3.8
CVE-2026-105683
Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
T
Patch status unknownEPSS %0
2.7
CVE-2026-105682
Ghost: Server-Side Request Forgery in Webhook Trigger
T
Patch status unknownEPSS %0
6.5
CVE-2026-105681
Ghost: Authorization Bypass in Comments Feature
T
Patch status unknownEPSS %0
6.5
CVE-2026-105680
Ghost: Authorization Issue Allowed Author Role to Delete any Post
T
Patch status unknownEPSS %0
7.3
CVE-2026-105679
Ghost: Stored XSS via File Uploads on Local Storage
T
Patch status unknownEPSS %0
4.3
CVE-2026-105678
Ghost: Editors Could Promote Staff Users to Their Own Role
T
Patch status unknownEPSS %0
7.2
CVE-2026-105677
Ghost: Remote Code Execution via Theme Translation Files
T
Patch status unknownEPSS %1
4.9
CVE-2026-105676
Ghost: Path Traversal via Locale Setting
T
Patch status unknownEPSS %0
7.5
CVE-2026-105675
Ghost: Invite Token Disclosure in Ghost Admin API
T
Patch status unknownEPSS %0
3.1
CVE-2026-105652
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
T
Patch status unknownEPSS %0