Wp Ghost (Hide My Wp Ghost) – Security & Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:johndarrel:wp_ghost_(hide_my_wp_ghost)_–_security_&_firewall:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Johndarrel (dfde4796-b3e6-5244-941a-cd49ec48de8e) |
|---|---|
| Product | Wp Ghost (Hide My Wp Ghost) – Security & Firewall (503efc78-ecf7-5971-a80b-f9acce3def42) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2056 |
vulnerable | 2026-06-08 07:14:57.842960 |
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
HIGH (7.5)
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers to read the contents of specific file types on the server, which can contain sensitive information.
Published: 2025-03-14T04:22:34.842Z
Updated: 2026-04-08T17:33:05.692Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13794 |
vulnerable | 2026-06-08 06:25:38.511812 |
Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure
MEDIUM (5.3)
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to discover the hidden login page location.
Published: 2025-02-12T07:35:39.178Z
Updated: 2026-04-08T17:11:53.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10825 |
vulnerable | 2026-06-08 06:23:47.654191 |
Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL
MEDIUM (6.1)
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link.
Published: 2024-11-15T06:48:04.243Z
Updated: 2026-04-08T17:20:39.604Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4537 |
vulnerable | 2026-06-08 05:51:59.703011 |
Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass
MEDIUM (6.5)
The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.
Published: 2023-05-09T02:47:14.059Z
Updated: 2026-04-08T16:51:21.126Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.