GCVE - cpe:2.3:a:ghost:ghost:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ghost:ghost:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ghost (`b50ba6a2-6882-52df-b0fe-d50a87f187b5`)
Product	Ghost (`83aefbd7-a394-51e0-96b0-2576e4ed74c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9862`	vulnerable	2026-06-08 07:47:10.073225	Ghost 6.0.6 - SSRF via oEmbed Bookmark Server-Side Request Forgery (SSRF) vulnerability in Ghost allows an attacker to access internal resources.This issue affects Ghost: from 6.0.0 through 6.0.8, from 5.99.0 through 5.130.3. Published: 2025-09-17T15:02:01.533Z Updated: 2025-09-17T15:42:32.020Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/regida https://github.com/TryGhost/Ghost https://github.com/TryGhost/Ghost/releases/tag/v6.0.9 https://github.com/TryGhost/Ghost/security/advisories/GHSA-f7qg-xj45-w956	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-43409`	vulnerable	2026-06-08 06:45:50.703732	Ghost's improper authentication allows access to member information and actions MEDIUM (6.5) Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46.0-v5.89.4. v5.89.5 contains a fix for this issue. Published: 2024-08-20T15:05:04.338Z Updated: 2024-09-03T14:58:35.797Z Open on db.gcve.eu Reference links https://github.com/TryGhost/Ghost/security/advisories/GHSA-78x2-cwp9-5j42 https://github.com/TryGhost/Ghost/commit/dac25612520b571f58679764ecc27109e641d1db	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34559`	vulnerable	2026-06-08 06:37:33.477892	WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability HIGH (7.5) Insertion of Sensitive Information into Log File vulnerability in Ghost Foundation Ghost.This issue affects Ghost: from n/a through 1.4.0. Published: 2024-05-09T12:03:01.037Z Updated: 2026-04-28T16:09:49.526Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/ghost/wordpress-ghost-plugin-1-4-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-34448`	vulnerable	2026-06-08 06:37:33.311866	Details available Ghost before 5.82.0 allows CSV Injection during a member CSV export. Published: 2024-05-22T16:01:29.178Z Updated: 2025-02-13T15:53:24.907Z Open on db.gcve.eu Reference links https://github.com/phulelouch/CVEs/blob/main/CVE-2024-34448.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.