Skip to content
OpenAdvisories

Vendor

Ghost Foundation

10 known vulnerabilities.

Products

Ghost 9 node-sqlite3 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-72596

    Ghost Foundation Ghost - Broken Access Control

    A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible() cascade is missing the branch that handles the combined isAuthor and isDestroy condit…

    Ghost Foundation Ghost
  • High 7.5
    CVE-2024-34559

    WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability

    Insertion of Sensitive Information into Log File vulnerability in Ghost Foundation Ghost.This issue affects Ghost: from n/a through 1.4.0.

    Ghost Foundation Ghost
  • High 8.1
    CVE-2022-43441

    sqlite vulnerable to code execution due to Object coercion

    A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerabili…

    Ghost Foundation node-sqlite3 sqlite3 node-sqlite3 Debian Ubuntu npm