WP Ghost
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 12, 2025 to present
3
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
36/100
low
Severity Distribution
Critical
0High
1Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
Most Affected Products
1. WPPlugins Hide My Wp Ghost Wordpress2
2. WP Ghost1
3. WP Ghost WP Ghost1
4. WP Ghost Hide My WP Ghost1
5. WP Ghost Hide My WP Ghost – Security & Firewall1
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/wordpress-security-plugin-wp-ghost-vulnerable-to-remote-code-execution-bug/
unknown
WordPress security plugin WP Ghost vulnerable to remote code execution bug
3/20/2025🔧 No Patch
CVE-2025-2056
CVSS 7.5high
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
3/14/2025🔧 No Patch
CVE-2024-13794
CVSS 5.3medium
Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure
2/12/2025
Monitor WP Ghost in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.