Wpplugins

Hide My Wp Ghost

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-26909

  • EPSS 0.05%
  • Veröffentlicht 27.03.2025 15:48:49
  • Zuletzt bearbeitet 25.06.2025 20:47:07

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in John Darrel Hide My WP Ghost allows PHP Local File Inclusion.This issue affects Hide My WP Ghost: from n/a through 5.4.01.

7.5

CVE-2025-2056

  • EPSS 0.26%
  • Veröffentlicht 14.03.2025 05:15:42
  • Zuletzt bearbeitet 20.06.2025 18:13:13

The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers to read the conten...

5.3

CVE-2024-13794

  • EPSS 0.08%
  • Veröffentlicht 12.02.2025 08:15:08
  • Zuletzt bearbeitet 25.02.2025 19:38:05

The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes i...

6.1

CVE-2024-10825

  • EPSS 0.88%
  • Veröffentlicht 15.11.2024 07:15:17
  • Zuletzt bearbeitet 20.11.2024 15:01:19

The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping. This makes it possibl...

8.6

CVE-2024-6420

Exploit
  • EPSS 23.95%
  • Veröffentlicht 23.07.2024 06:15:11
  • Zuletzt bearbeitet 29.05.2025 16:08:13

The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.

5.3

CVE-2023-34001

  • EPSS 0.11%
  • Veröffentlicht 04.06.2024 07:15:42
  • Zuletzt bearbeitet 30.06.2025 18:18:30

Improper Restriction of Excessive Authentication Attempts vulnerability in WPPlugins – WordPress Security Plugins Hide My WP Ghost allows Functionality Bypass.This issue affects Hide My WP Ghost: from n/a through 5.0.25.

6.5

CVE-2022-4537

  • EPSS 0.11%
  • Veröffentlicht 09.05.2023 03:15:09
  • Zuletzt bearbeitet 21.11.2024 07:35:26

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request log...