Skip to content
OpenAdvisories

Vendor

TryGhost

88 known vulnerabilities.

Products

Ghost 85 express-hbs 1 Ghost-CLI 1 ActivityPub 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.7
    CVE-2026-29053 Public exploit

    Ghost Vulnerable to Remote Code Execution via Malicious Themes

    Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.

    TryGhost Ghost ghost npm
  • Critical 9.4
    CVE-2026-26980 Public exploit EPSS 71%

    Ghost has a SQL Injection in its Content API

    Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1.

    TryGhost Ghost ghost npm
  • High 8.1
    CVE-2026-22594 Public exploit

    Ghost has Staff 2FA bypass

    Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's 2FA mechanism allows staff users to skip email 2FA. This issue has been patched in versions 5.130.6 and 6.11.0.

    TryGhost Ghost ghost npm
  • Medium 4.9
    CVE-2023-40028 Public exploit EPSS 69%

    Arbitrary file read via symlinks in Ghost

    Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host oper…

    TryGhost Ghost ghost npm