CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 75 Last 7 days 2,843 Total CVEs 401,205 CISA KEV 1,731 Critical 42,395 All stats

Filters: Vendor: WP-Plugins Clear all

Page 1

CVE-2025-26909 CRITICAL

WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability

CVSS 9.8 EPSS 0.69% Mar 27, 2025

CVE-2025-2056 HIGH

WP Ghost <= 5.4.01 - Unauthenticated Limited File Read

CVSS 7.5 EPSS 0.56% Mar 14, 2025

CVE-2024-13794 MEDIUM

Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure

CVSS 5.3 EPSS 0.46% Feb 12, 2025

CVE-2024-10825 MEDIUM

Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL

CVSS 6.1 EPSS 0.35% Nov 15, 2024

CVE-2024-6420 HIGH

Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure

CVSS 8.6 EPSS 1.80% Jul 23, 2024

CVE-2023-34001 MEDIUM

WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability

CVSS 5.3 EPSS 0.48% Jun 4, 2024

CVE-2023-4962 MEDIUM

Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

CVSS 6.4 EPSS 0.44% Jan 11, 2024

CVE-2007-10003 HIGH

The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection

CVSS 8.8 EPSS 0.56% Oct 29, 2023

CVE-2005-10002 CRITICAL

almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

CVSS 9.8 EPSS 0.75% Oct 29, 2023

CVE-2023-32518 HIGH

WordPress WP Chinese Conversion Plugin <= 1.1.16 is vulnerable to Cross Site Scripting (XSS)

CVSS 7.1 EPSS 0.38% Aug 25, 2023

CVE-2022-4537 MEDIUM

Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass

CVSS 6.5 EPSS 0.32% May 9, 2023

CVE-2013-2693 MEDIUM

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentic…

CVSS 6.8 EPSS 1.08% Apr 10, 2014

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2025-26909	WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability	CRITICAL	9.8	0.69%	Mar 27, 2025
CVE-2025-2056	WP Ghost <= 5.4.01 - Unauthenticated Limited File Read	HIGH	7.5	0.56%	Mar 14, 2025
CVE-2024-13794	Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure	MEDIUM	5.3	0.46%	Feb 12, 2025
CVE-2024-10825	Hide My WP Ghost – Security & Firewall <= 5.3.01 - Reflected Cross-Site Scripting via URL	MEDIUM	6.1	0.35%	Nov 15, 2024
CVE-2024-6420	Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure	HIGH	8.6	1.80%	Jul 23, 2024
CVE-2023-34001	WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability	MEDIUM	5.3	0.48%	Jun 4, 2024
CVE-2023-4962	Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	MEDIUM	6.4	0.44%	Jan 11, 2024
CVE-2007-10003	The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection	HIGH	8.8	0.56%	Oct 29, 2023
CVE-2005-10002	almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal	CRITICAL	9.8	0.75%	Oct 29, 2023
CVE-2023-32518	WordPress WP Chinese Conversion Plugin <= 1.1.16 is vulnerable to Cross Site Scripting (XSS)	HIGH	7.1	0.38%	Aug 25, 2023
CVE-2022-4537	Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass	MEDIUM	6.5	0.32%	May 9, 2023
CVE-2013-2693	Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentic…	MEDIUM	6.8	1.08%	Apr 10, 2014

Rows per page

Showing 1 to 12 CVEs · page 1