Skip to content
OpenAdvisories

Product · John Darrel

WP Ghost (Hide My WP Ghost) – Security & Firewall

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-13794

    Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure

    The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possibl…

    John Darrel WP Ghost (Hide My WP Ghost) – Security & Firewall Web / CMS
  • Medium 6.1
    CVE-2024-10825

    Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL

    The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possible for una…

    John Darrel WP Ghost (Hide My WP Ghost) – Security & Firewall Web / CMS
  • Medium 6.5
    CVE-2022-4537

    Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass

    The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and …

    John Darrel WP Ghost (Hide My WP Ghost) – Security & Firewall Web / CMS