W
WP Ghost
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 12, 2025 to present
4
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
44/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
1
2
Path Traversal
1
Most Affected Products
1. WP Ghost Hide My WP Ghost2
2. WPPlugins Hide My Wp Ghost Wordpress2
3. WP Ghost1
4. WP Ghost WP Ghost1
5. WP Ghost Hide My WP Ghost – Security & Firewall1
Recent Vulnerabilities
See more →CVE-2026-89051
CVSS 7.2high
Hide My WP Ghost <= 7.0.12 - Unauthenticated Stored Cross-Site Scripting via Comment Content
Oct 16, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/wordpress-security-plugin-wp-ghost-vulnerable-to-remote-code-execution-bug/
unknown
WordPress security plugin WP Ghost vulnerable to remote code execution bug
Mar 20, 2025🔧 No Patch
CVE-2025-2056
CVSS 7.5high
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
Mar 14, 2025🔧 No Patch
CVE-2024-13794
CVSS 5.3medium
Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure
Feb 12, 2025
Monitor WP Ghost in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.