Skip to content
OpenAdvisories

Vendor

John Darrel

10 known vulnerabilities.

Products

Hide My WP Ghost 4 WP Ghost (Hide My WP Ghost) – Security & Firewall 4 Hide My WP Ghost – Security & Firewall 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2026-89051

    Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in versions up to, and including, 7.0.12 due to insufficient input sanitization and output escapin…

    John Darrel Hide My WP Ghost – Security & Firewall Web / CMS
  • High 7.2
    CVE-2026-81806

    WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09.

    John Darrel Hide My WP Ghost
  • High 7.4
    CVE-2026-59546

    WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability

    Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions.

    John Darrel Hide My WP Ghost
  • High 7.5
    CVE-2025-2056

    WP Ghost <= 5.4.01 - Unauthenticated Limited File Read

    The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers to read the contents of spe…

    John Darrel WP Ghost (Hide My WP Ghost) – Security & Firewall Web / CMS