WP Ghost (Hide My WP Ghost) – Security & Firewall

Vulnerabilities 11Slug hide-my-wpLatest version 7.0.02WordPress.org →

Minimum safe version

7.0.00

Update to 7.0.00 or later to address 10 fixable vulnerabilities

Latest available7.0.02 ✓⚠ 1 vulnerability has no fix

Medium 4.7

2026-04-08< 7.0.00

CVE-2026-39484

CVE Wordfence

High 7.1 Unfixed

2026-01-22≤ 6.2.12

WordPress Hide My WP plugin <= 6.2.12 - Reflected Cross Site Scripting (XSS) vulnerability

CVE Wordfence

Critical 9.6

2025-03-27< 5.4.02

CVE-2025-26909

CVE Wordfence

High 7.5

2025-03-14< 5.4.02

WP Ghost <= 5.4.01 - Unauthenticated Limited File Read

EUVD Wordfence CVE

Medium 5.3

2025-02-12< 5.4.01

CVE-2024-13794

CVE Patchstack EUVD Wordfence

Medium 6.1

2024-11-15< 5.3.02

CVE-2024-10825

CVE Patchstack Wordfence

High 8.6

2024-07-23< 5.2.02

CVE-2024-6420

CVE Patchstack Wordfence

Medium 5.3

2024-06-04< 5.0.26

CVE-2023-34001

CVE Patchstack Wordfence

N/A

< 2.0.03

Hide My WP <= 2.0.02 - SQL Injection & Script Injection

WPScan

Medium 6.5

2023-05-09< 5.0.20

CVE-2022-4537

CVE Patchstack Wordfence WPScan

N/A

2018-09-15< 2.0.03

WordPress Hide My WP Ghost plugin <= 2.0.02 - SQL Injection (SQLi) vulnerability

Patchstack