Wpplugins

Hide My Wp Ghost

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-26909

  • EPSS 0.05%
  • Published 27.03.2025 15:48:49
  • Last modified 25.06.2025 20:47:07

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in John Darrel Hide My WP Ghost allows PHP Local File Inclusion.This issue affects Hide My WP Ghost: from n/a through 5.4.01.

7.5

CVE-2025-2056

  • EPSS 0.23%
  • Published 14.03.2025 05:15:42
  • Last modified 20.06.2025 18:13:13

The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers to read the conten...

5.3

CVE-2024-13794

  • EPSS 0.08%
  • Published 12.02.2025 08:15:08
  • Last modified 25.02.2025 19:38:05

The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes i...

6.1

CVE-2024-10825

  • EPSS 0.88%
  • Published 15.11.2024 07:15:17
  • Last modified 20.11.2024 15:01:19

The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possibl...

8.6

CVE-2024-6420

Exploit
  • EPSS 23.95%
  • Published 23.07.2024 06:15:11
  • Last modified 29.05.2025 16:08:13

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

5.3

CVE-2023-34001

  • EPSS 0.11%
  • Published 04.06.2024 07:15:42
  • Last modified 30.06.2025 18:18:30

Improper Restriction of Excessive Authentication Attempts vulnerability in WPPlugins – WordPress Security Plugins Hide My WP Ghost allows Functionality Bypass.This issue affects Hide My WP Ghost: from n/a through 5.0.25.

6.5

CVE-2022-4537

  • EPSS 0.11%
  • Published 09.05.2023 03:15:09
  • Last modified 21.11.2024 07:35:26

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request log...