tryghost Ghost Vulnerabilities

Tryghost Ghost vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

27 January 2026

JavaScript Execution Vulnerability in Ghost CMS and Portal
CVE-2026-24778
TryghostGhost8.8HIGH

10 January 2026

SSRF Vulnerability in Ghost Content Management System Affects Authentication Tokens
CVE-2026-22597
TryghostGhost5.1MEDIUM
SQL Injection Risk in Ghost CMS Versions by TryGhost
CVE-2026-22596
TryghostGhost6.7MEDIUM
Authentication Bypass in Ghost CMS Affects User Access Control
CVE-2026-22595
TryghostGhost8.1HIGH
Vulnerability in Ghost CMS 2FA Mechanism Affects Multiple Versions
CVE-2026-22594
TryghostGhost8.1HIGH

20 August 2024

Ghost's improper authentication allows access to member information and actions
CVE-2024-43409
TryghostGhost6.5MEDIUM

15 August 2023

Ghost Open Source CMS Vulnerability Allows Authenticated Users to Read Arbitrary Files
CVE-2023-40028
TryghostGhost👾🟡EPSS 77%4.9MEDIUM

8 May 2023

Ghost vulnerable to disclosure of private API fields
CVE-2023-31133
TryghostGhostEPSS 18%7.5HIGH

3 September 2021

Privilege escalation: all users can access Admin-level API keys
CVE-2021-39192
TryghostGhost6.5MEDIUM

29 April 2021

DOM XSS in Theme Preview
CVE-2021-29484
TryghostGhostEPSS 82%6.8MEDIUM