Hide My Wp Ghost
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:hide_my_wp_ghost:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Hide My Wp Ghost (a8e09cc0-80b2-5013-8984-94b22f487c22) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-86796 |
vulnerable | 2026-10-13 12:28:46.598186 |
WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters
MEDIUM (5.3)
The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before disabling its firewall, threat-detection and login/URL-hiding protections, treating the mere presence of an attacker-suppliable request parameter as sufficient, which allows unauthenticated attackers to disable those protections and re-expose the concealed login and admin URLs on any request.
Published: 2026-09-18T06:11:37.505Z
Updated: 2026-09-18T10:59:56.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86800 |
vulnerable | 2026-10-13 12:28:46.477913 |
WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check
MEDIUM (5.3)
The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request before disabling its login and URL hiding protection, dropping that protection precisely when the request's verification value is missing or incorrect, which any visitor can arrange, allowing unauthenticated attackers to re-expose the concealed WordPress login page location.
Published: 2026-09-18T06:11:38.193Z
Updated: 2026-09-18T10:59:55.898Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6420 |
vulnerable | 2026-06-08 06:58:19.393894 |
Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
Published: 2024-07-23T06:00:03.289Z
Updated: 2025-08-27T12:00:48.445Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.