Vulnerabilities / WP Ghost (Hide My WP Ghost)
WP Ghost (Hide My WP Ghost) vulnerabilities
Advisories WPSec published for Hide My WP Ghost – Security & Firewall. Other sources may list more. Its attack surface: WP Ghost (Hide My WP Ghost) on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0551 | WP Ghost (Hide My WP Ghost) <= 7.0.12 - Insufficient Session Expiration in Temporary Logins on PHP 8 | Medium 4.8 | 7.0.13 |
| 2026-10-07 | WPSEC-2026-0550 | WP Ghost (Hide My WP Ghost) <= 7.0.12 - Unauthenticated Firewall and Brute Force Protection Bypass via Forged Login Cookie | Medium 5.3 | 7.0.13 |
| 2026-10-01 | WPSEC-2026-0118 | WP Ghost (Hide My WP Ghost) <= 7.0.11 - Unauthenticated Login CAPTCHA Bypass via 'woocommerce-login-nonce' Parameter | Medium 5.3 | 7.0.12 |
License: CC BY 4.0