# Ghost.

Every CVE that names Ghost among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head](https://agentprime.io/advisories/CVE-2026-103292.md)
  `CVE-2026-103292` · CVE record: TryGhost Ghost · CVSS 8.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch](https://agentprime.io/advisories/CVE-2026-103291.md)
  `CVE-2026-103291` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications](https://agentprime.io/advisories/CVE-2026-103286.md)
  `CVE-2026-103286` · CVE record: TryGhost Ghost · CVSS 8.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Privilege escalation
- [Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2026-103285.md)
  `CVE-2026-103285` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site request forgery (CSRF)
- [Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedback](https://agentprime.io/advisories/CVE-2026-103284.md)
  `CVE-2026-103284` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling](https://agentprime.io/advisories/CVE-2026-103283.md)
  `CVE-2026-103283` · CVE record: TryGhost Ghost · CVSS 8.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token](https://agentprime.io/advisories/CVE-2026-103282.md)
  `CVE-2026-103282` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Race condition
- [Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API](https://agentprime.io/advisories/CVE-2026-103281.md)
  `CVE-2026-103281` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure
- [Ghost 0.8.0 before 6.23.0 Information Disclosure via Setup Endpoint](https://agentprime.io/advisories/CVE-2026-103280.md)
  `CVE-2026-103280` · CVE record: TryGhost Ghost · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure
- [Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass](https://agentprime.io/advisories/CVE-2026-103279.md)
  `CVE-2026-103279` · CVE record: TryGhost Ghost · CVSS 7.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe](https://agentprime.io/advisories/CVE-2026-103278.md)
  `CVE-2026-103278` · CVE record: TryGhost Ghost · CVSS 8.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal
- [Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed](https://agentprime.io/advisories/CVE-2026-103277.md)
  `CVE-2026-103277` · CVE record: TryGhost Ghost · CVSS 8.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Ghost before 6.20.0 File Read via URL Encoding Bypass](https://agentprime.io/advisories/CVE-2026-103276.md)
  `CVE-2026-103276` · CVE record: TryGhost Ghost · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-173
- [Ghost 5.42.2 before 6.58.0 Password Hash Disclosure](https://agentprime.io/advisories/CVE-2026-103275.md)
  `CVE-2026-103275` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure
- [Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Read](https://agentprime.io/advisories/CVE-2026-103274.md)
  `CVE-2026-103274` · CVE record: TryGhost Ghost · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token](https://agentprime.io/advisories/CVE-2026-103273.md)
  `CVE-2026-103273` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API](https://agentprime.io/advisories/CVE-2026-103272.md)
  `CVE-2026-103272` · CVE record: TryGhost Ghost · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure
- [Ghost 4.0.0 before 6.63.0 Restricted Content Bypass](https://agentprime.io/advisories/CVE-2026-103271.md)
  `CVE-2026-103271` · CVE record: TryGhost Ghost · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost 5.3.0 before 6.62.0 Missing Authorization via Post Excerpts](https://agentprime.io/advisories/CVE-2026-103269.md)
  `CVE-2026-103269` · CVE record: TryGhost Ghost · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Reset](https://agentprime.io/advisories/CVE-2026-103268.md)
  `CVE-2026-103268` · CVE record: TryGhost Ghost · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite](https://agentprime.io/advisories/CVE-2026-103267.md)
  `CVE-2026-103267` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-807
- [Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modification](https://agentprime.io/advisories/CVE-2026-103266.md)
  `CVE-2026-103266` · CVE record: TryGhost Ghost · CVSS 7.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control
- [Ghost Foundation Ghost - Broken Access Control](https://agentprime.io/advisories/CVE-2026-72596.md)
  `CVE-2026-72596` · CVE record: Ghost Foundation Ghost · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control
- [WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability](https://agentprime.io/advisories/CVE-2024-34559.md)
  `CVE-2024-34559` · CVE record: Ghost Foundation Ghost · CVSS 7.5 High · Not analysed yet · Published 9 May 2024 · Tags: Information disclosure
- [Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…](https://agentprime.io/advisories/CVE-2022-47197.md)
  `CVE-2022-47197` · CVE record: Ghost Foundation Ghost · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2023 · Tags: CWE-453
- [Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…](https://agentprime.io/advisories/CVE-2022-47196.md)
  `CVE-2022-47196` · CVE record: Ghost Foundation Ghost · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2023 · Tags: CWE-453
- [Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…](https://agentprime.io/advisories/CVE-2022-47195.md)
  `CVE-2022-47195` · CVE record: Ghost Foundation Ghost · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2023 · Tags: CWE-453
- [Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…](https://agentprime.io/advisories/CVE-2022-47194.md)
  `CVE-2022-47194` · CVE record: Ghost Foundation Ghost · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jan 2023 · Tags: CWE-453
- [A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.](https://agentprime.io/advisories/CVE-2022-41697.md)
  `CVE-2022-41697` · CVE record: Ghost Foundation Ghost · CVSS 5.3 Medium · EPSS 0.20 · Not analysed yet · Published 23 Dec 2022 · Tags: CWE-204

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ghost>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ghost/>. Everything for agents: <https://agentprime.io/llms.txt>.