What’s Vulnerable › Products

johndarrel WP Ghost (Hide My WP Ghost) – Security & Firewall vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your johndarrel WP Ghost (Hide My WP Ghost) – Security & Firewall version is affected

Latest johndarrel WP Ghost (Hide My WP Ghost) – Security & Firewall vulnerabilities

• CVE-2026-86800 — WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check (CVSS 5.3)
• CVE-2026-86796 — WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters (CVSS 5.3)
• CVE-2026-81806 — WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2)
• CVE-2026-59546 — WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability (CVSS 7.4)
• CVE-2026-39484 — WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability (CVSS 4.7)
• CVE-2025-26909 — WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability (CVSS 9.8)
• CVE-2025-2056 — WP Ghost <= 5.4.01 - Unauthenticated Limited File Read (CVSS 7.5)
• CVE-2024-13794 — Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure (CVSS 5.3)
• CVE-2024-10825 — Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL (CVSS 6.1)
• CVE-2024-6420 — Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure (CVSS 8.6)
• CVE-2023-34001 — WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability (CVSS 5.3)
• CVE-2022-4537 — Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass (CVSS 6.5)