Sploitus

36 exploited vulnerabilities in Ghost

Vulnerabilities with publicly known exploits

Vendors
Ghost Foundation, Ghost
With known exploits
36
Affected Docker Ghost Alpine Docker Image versions
< 2.16.1
Affected Ghost versions
< 6.19.1, 4.39.0, 5.85.1, 5.9.4, 5.76.0, 6.19.3, 5.121.0, 6.15.0, 5.82.0, 5.130.6, 6.11.0, 5.42.1, 5.46.1, 5.89.5, 4.3.3, 5.130.3, 6.0.8, 5.35.0, 5.59.1
Affected Ghost Portal versions
< 2.51.5, 2.57.1
Affected Github Gh-ost versions
< 1.1.3

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2020-35185
CVSS 10.0 CRITICAL 2020-12-17FIX AVAILABLE
CVE-2026-29053 3 exploits
CVSS 9.8 CRITICAL 2026-03-03FIX AVAILABLE
Exploit for Injection in GhostExploit for SQL Injection in Ghost
CVE-2022-27139
CVSS 9.8 CRITICAL 2022-04-12
CVE-2026-26980 7 exploits
CVSS 9.7 CRITICAL 2026-02-16FIX AVAILABLE
Exploit for SQL Injection in GhostExploit for SQL Injection in Ghost
CVE-2026-53943
CVSS 9.6 CRITICAL 2026-06-12FIX AVAILABLE
CVE-2022-41654
CVSS 9.6 CRITICAL 2022-11-28FIX AVAILABLE
CVE-2024-34451
CVSS 9.1 CRITICAL 2024-06-16
CVE-2022-47197
CVSS 9.0 CRITICAL 2023-01-19
CVE-2022-47196
CVSS 9.0 CRITICAL 2023-01-19
CVE-2022-47195
CVSS 9.0 CRITICAL 2023-01-19FIX AVAILABLE
CVE-2022-47194
CVSS 9.0 CRITICAL 2023-01-19FIX AVAILABLE
CVE-2024-23724
CVSS 9.0 CRITICAL 2023-12-08FIX AVAILABLE
CVE-2026-29784
CVSS 8.8 HIGH 2026-03-05FIX AVAILABLE
CVE-2026-24778
CVSS 8.8 HIGH 2026-01-27FIX AVAILABLE
CVE-2024-34448 1 exploit
CVSS 8.8 HIGH 2024-05-22FIX AVAILABLE
CVEs
CVE-2026-22595
CVSS 8.1 HIGH 2026-01-08FIX AVAILABLE
CVE-2026-22594
CVSS 8.1 HIGH 2026-01-08FIX AVAILABLE
CVE-2023-32235 3 exploits
CVSS 7.5 HIGH 2023-05-05FIX AVAILABLE
📄 Ghost CMS Path TraversalGhost CMS 5.42.1 - Path Traversal
CVE-2023-31133
CVSS 7.5 HIGH 2023-05-03FIX AVAILABLE
CVE-2026-22596
CVSS 7.2 HIGH 2026-01-08FIX AVAILABLE
CVE-2024-43409
CVSS 6.9 MEDIUM 2024-08-20FIX AVAILABLE
CVE-2022-21687
CVSS 6.8 MEDIUM 2022-02-01FIX AVAILABLE
CVE-2021-29484
CVSS 6.8 MEDIUM 2021-04-29FIX AVAILABLE
CVE-2025-9862
CVSS 6.5 MEDIUM 2025-09-15FIX AVAILABLE
CVE-2024-23725
CVSS 6.1 MEDIUM 2024-01-20FIX AVAILABLE
CVE-2026-53944
CVSS 5.8 MEDIUM 2026-06-24FIX AVAILABLE
CVE-2023-26510
CVSS 5.7 MEDIUM 2023-03-05FIX AVAILABLE
CVE-2026-53948
CVSS 5.4 MEDIUM 2026-06-24FIX AVAILABLE
CVE-2026-53946
CVSS 5.4 MEDIUM 2026-06-24FIX AVAILABLE
CVE-2026-59817
CVSS 5.3 MEDIUM 2026-07-09FIX AVAILABLE
CVE-2026-53949
CVSS 5.3 MEDIUM 2026-06-24FIX AVAILABLE
CVE-2026-53947
CVSS 5.3 MEDIUM 2026-06-24FIX AVAILABLE
CVE-2022-41697
CVSS 5.3 MEDIUM 2022-12-22FIX AVAILABLE
CVE-2026-22597
CVSS 5.1 MEDIUM 2026-01-08FIX AVAILABLE
CVE-2023-40028 12 exploits
CVSS 4.9 MEDIUM 2023-08-15FIX AVAILABLE
📄 Ghost CMS 5.59.1 Arbitrary File ReadGhost CMS 5.59.1 - Arbitrary File Read
CVE-2026-53945
CVSS 4.0 MEDIUM 2026-06-24FIX AVAILABLE