Hide My WP Ghost – Security & Firewall

Уязвимости

• CVE-2025-26909без авторизации · нужен клик≤ 5.4.01

  WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability

  Критич. 9.8

• CVE-2021-36916без авторизации≤ 6.2.3

  WordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated SQL injection (SQLi) vulnerability

  Критич. 9.8

• CVE-2025-2056без авторизации≤ 5.4.01

  WP Ghost <= 5.4.01 - Unauthenticated Limited File Read

  Высокий 7.5

• CVE-2021-36917без авторизации≤ 6.2.3

  WordPress Hide My WP premium plugin <= 6.2.3 - Unauthenticated Plugin Deactivation vulnerability

  Высокий 7.5

• CVE-2026-59546без авторизации≤ 7.0.06

  WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability

  Высокий 7.4

• CVE-2026-81806без авторизации≤ 7.0.09

  WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability

  Высокий 7.2

• CVE-2022-4537без авторизации≤ 5.0.18

  Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass

  Средний 6.5

• CVE-2024-10825без авторизации · нужен клик≤ 5.3.01

  Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL

  Средний 6.1

• CVE-2024-13794без авторизации≤ 5.3.02

  Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure

  Средний 5.3

• CVE-2023-34001без авторизации≤ 5.0.25

  WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability

  Средний 5.3

• CVE-2026-7527без авторизации · нужен клик≤ 7.0.02

  WP Ghost (Hide My WP Ghost) <= 7.0.02 - Unauthenticated Open Redirect via 'redirect_to' Parameter

  Средний 4.7

• CVE-2026-39484без авторизации · нужен клик≤ 7.0.00

  WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability

  Средний 4.7