Vulnerabilities

TI-2026-56441 CVE-2026-81806 · GHSA-6v4m-2c3x-c677

WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability

LOW 37

Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00266 Published 2026-09-08 No fix listed CWE-918

TI-2026-42509 CVE-2026-59546 · GHSA-v2wf-pp9p-h6g4

WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability

LOW 35

Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00387 Published 2026-07-27 No fix listed CWE-639

TI-2026-28458 CVE-2026-39484 · GHSA-vvj2-j66f-h239

WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability

LOW 21

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < 7.0.00.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00209 Published 2026-04-08 No fix listed CWE-601

Vulnerabilities

Filters

WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability

WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability

WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability