Vulnerabilities > Ghost > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-12-22 CVE-2022-41697 Unspecified vulnerability in Ghost 5.9.4
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.
network
low complexity
ghost
5.3
2019-09-17 CVE-2016-10983 Improper Authentication vulnerability in Ghost
The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data.
network
low complexity
ghost CWE-287
6.5