T
Vendor security profile
TryGhost
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs64
Critical0
CISA KEV0
Public exploit0
Patch rate%16
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
9
0
54
CVE KEV
CVE severity distribution
64toplam CVE
High25 (39%)
Medium35 (55%)
Low4 (6%)
Patch and exploitation view
%16
Verified patch
%0
CISA KEV
%0
Public exploit
10Patch available
0Partial
0Workaround
0Vendor: no patch
54Unknown
Latest vulnerabilities
3.8
CVE-2026-105683
Ghost: Path Traversal Vulnerability in Ghost ImageSize Service
T
Patch status unknownEPSS %0
2.7
CVE-2026-105682
Ghost: Server-Side Request Forgery in Webhook Trigger
T
Patch status unknownEPSS %0
6.5
CVE-2026-105681
Ghost: Authorization Bypass in Comments Feature
T
Patch status unknownEPSS %0
6.5
CVE-2026-105680
Ghost: Authorization Issue Allowed Author Role to Delete any Post
T
Patch status unknownEPSS %0
7.3
CVE-2026-105679
Ghost: Stored XSS via File Uploads on Local Storage
T
Patch status unknownEPSS %0
4.3
CVE-2026-105678
Ghost: Editors Could Promote Staff Users to Their Own Role
T
Patch status unknownEPSS %0
7.2
CVE-2026-105677
Ghost: Remote Code Execution via Theme Translation Files
T
Patch status unknownEPSS %1
4.9
CVE-2026-105676
Ghost: Path Traversal via Locale Setting
T
Patch status unknownEPSS %0
7.5
CVE-2026-105675
Ghost: Invite Token Disclosure in Ghost Admin API
T
Patch status unknownEPSS %0
3.1
CVE-2026-105652
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
T
Patch status unknownEPSS %0