Extension WordPress
Vulnérabilités WP Ghost (Hide My WP Ghost) – Security & Firewall
Cette page rassemble les failles publiées pour WP Ghost (Hide My WP Ghost) – Security & Firewall, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Ghost (Hide My WP Ghost) – Security & Firewall
8 fiches
Hide My WP Ghost < 7.0.00 – Unauthenticated Open Redirect
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all versions up to 7.0.00 (exclusive). This is due to insufficient validation on a redirect url. This makes…
[*, 7.0.00)
7.0.00
18/03/2026
Hide My WP Ghost <= 5.4.01 – Unauthenticated Local File Inclusion
The Hide My WP Ghost plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.4.01. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing…
*-5.4.01
5.4.02
19/03/2025
WP Ghost <= 5.4.01 – Unauthenticated Limited File Read
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers…
*-5.4.01
5.4.02
13/03/2025
Hide My WP Ghost – Security & Firewall <= 5.3.02 – Unauthenticated Login Page Disclosure
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the…
*-5.3.02
5.4.01
11/02/2025
Hide My WP Ghost – Security & Firewall <= 5.3.01 – Reflected Cross-Site Scripting via URL
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This…
*-5.3.01
5.3.02
14/11/2024
Hide My WP Ghost – Security & Firewall <= 5.2.01 – Login Page Disclosure
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 5.2.01. This is due to the plugin not prevent redirects to the login…
*-5.2.01
5.2.02
02/07/2024
Hide My WP Ghost <= 5.0.25 – CAPTCHA Bypass in brute_math_authenticate
The Hide My WP Ghost plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 5.0.25. This is due a logic flaw within the brute_math_authenticate function. This makes it possible for unauthenticated attackers to…
*-5.0.25
5.0.26
22/08/2023
Hide My WP Ghost – Security Plugin <= 5.0.18 – IP Address Spoofing to Protection Mechanism Bypass
The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being…
*-5.0.18
5.0.20
08/05/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.