Advisories · Technology

John Darrel Hide My WP Ghost.

Every CVE that names John Darrel Hide My WP Ghost among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81806 CVE record

CVSS 7.2 High

WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability
- John Darrel Hide My WP Ghost
- Server-side request forgery (SSRF)
Not analysed yet 8 Sept 2026
CVE-2026-59546 CVE record

CVSS 7.4 High

WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability
- John Darrel Hide My WP Ghost
- Broken access control
Not analysed yet 27 Jul 2026
CVE-2026-39484 CVE record

CVSS 4.7 Medium

WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability
- John Darrel Hide My WP Ghost
- Open redirect
Not analysed yet 8 Apr 2026
CVE-2025-26909 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability
- John Darrel Hide My WP Ghost
- File inclusion
Not analysed yet 27 Mar 2025