tryghost Ghost Vulnerabilities

Tryghost Ghost vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

20 August 2024

Ghost's improper authentication allows access to member information and actions
CVE-2024-43409
TryghostGhost6.5MEDIUM

15 August 2023

Ghost Open Source CMS Vulnerability Allows Authenticated Users to Read Arbitrary Files
CVE-2023-40028
TryghostGhost👾🟡EPSS 75%4.9MEDIUM

8 May 2023

Ghost vulnerable to disclosure of private API fields
CVE-2023-31133
TryghostGhostEPSS 17%7.5HIGH

3 September 2021

Privilege escalation: all users can access Admin-level API keys
CVE-2021-39192
TryghostGhost6.5MEDIUM

29 April 2021

DOM XSS in Theme Preview
CVE-2021-29484
TryghostGhostEPSS 82%6.8MEDIUM