Tryghost vulnerabilities
88 CVEs and advisories name Tryghost as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-70591Ghost: Server-Side Request Forgery in Image Fetching
- CVE-2026-70590Ghost: Blind Password Hash Disclosure in Ghost Admin API
- CVE-2026-70589Ghost: Archived Offers can be Redeemed
- CVE-2026-70588Ghost: Cross-Site Scripting in Universal Import
- CVE-2026-25552Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header
- CVE-2026-59817Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
- CVE-2026-53943Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
- CVE-2026-53944Ghost: Private IP filtering bypass to make server-side requests to internal services
- CVE-2026-53945Ghost: Server-side request forgery via DNS rebinding in external request handling
- CVE-2026-53946Ghost: Mobiledoc image-size fetch SSRF
- CVE-2026-53947Ghost: Member existence leak via magic link sign-in response
- CVE-2026-53948Ghost: File Upload Content-Type Spoofing
- CVE-2026-53949Ghost Content API filter bypass reveals private fields
- CVE-2026-53950@tryghost/activitypub: XSS in Ghost's ActivityPub client
- CVE-2026-29784Ghost: Incomplete CSRF protections around OTC use
- CVE-2026-29053Ghost Vulnerable to Remote Code Execution via Malicious Themes
- CVE-2026-26980Ghost has a SQL Injection in its Content API
- CVE-2026-24778Ghost vulnerable to XSS via malicious Portal preview links
- CVE-2026-22597Ghost has SSRF via External Media Inliner
- CVE-2026-22596Ghost has SQL Injection in Members Activity Feed
- CVE-2026-22595Ghost has Staff Token permission bypass
- CVE-2026-22594Ghost has Staff 2FA bypass
- CVE-2024-43409Ghost's improper authentication allows access to member information and actions
- CVE-2023-40028Arbitrary file read via symlinks in Ghost
- CVE-2023-31133Ghost vulnerable to disclosure of private API fields
- CVE-2021-39192Privilege escalation: all users can access Admin-level API keys
- CVE-2021-32817File disclosure in express-hbs
- CVE-2021-29484DOM XSS in Theme Preview