Known vulnerabilities in WP Ghost (Hide My WP Ghost) – Security & Firewall
Hide and Secure WP paths with the 8G Firewall, Brute Force protection and Passkeys. AI security explanations available with a subscription.
17Reported vulnerabilities
9.8Highest CVSS score
7.0.09Latest version
100,000+Active installs
What to do now
Update WP Ghost (Hide My WP Ghost) – Security & Firewall to 7.0.13 or later.
17 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2021-36916 | Critical | 1.9% | 6.2.3 and earlier | 6.2.4 |
November 24, 2021 |
| CVE-2024-6420 | High | 1.8% | Before 5.2.02 | 5.2.02 |
July 23, 2024 |
| CVE-2021-36917 | High | 2.0% | 6.2.3 and earlier | 6.2.4 |
November 24, 2021 |
| CVE-2025-26909 | Critical | 0.7% | 5.4.01 and earlier | 5.4.02 |
March 19, 2025 |
| CVE-2025-2056 | High | 0.6% | Before 5.4.02 | 5.4.02 |
March 14, 2025 |
| CVE-2026-81806 | High | 0.3% | 7.0.09 and earlier | 7.0.10 |
September 7, 2026 |
| CVE-2026-89051 | High | 0.2% | 7.0.12 and earlier | 7.0.13 |
October 15, 2026 |
| CVE-2022-4537 | Medium | 0.3% | 5.0.18 and earlier | 5.0.20 |
May 9, 2023 |
| CVE-2024-10825 | Medium | 0.3% | Before 5.3.02 | 5.3.02 |
November 15, 2024 |
| CVE-2026-86800 | Medium | 0.3% | 0 up to (but not including) 7.0.11 | 7.0.11 |
September 18, 2026 |
| CVE-2026-86796 | Medium | 0.3% | 7.0.10 up to (but not including) 7.0.11 | 7.0.11 |
September 18, 2026 |
| CVE-2026-11870 | Medium | 0.3% | Before 7.0.05 | 7.0.05 |
August 4, 2026 |
| CVE-2024-13794 | Medium | 0.5% | Before 5.4.01 | 5.4.01 |
February 12, 2025 |
| CVE-2023-34001 | Medium | 0.5% | Before 5.0.26 | 5.0.26 |
June 4, 2024 |
| CVE-2026-7527 | Medium | 0.4% | 0 to 7.0.02 (inclusive) | 7.0.03 |
September 19, 2026 |
| CVE-2026-39484 | Medium | 0.3% | Before 7.0.00 | 7.0.00 |
March 18, 2026 |
| CVE-2026-59546 | Medium | 0.4% | 7.0.06 and earlier | 7.0.07 |
July 23, 2026 |