{"id":"CVE-2026-81806","aliases":["EUVD-2026-72652","GHSA-6v4m-2c3x-c677"],"status":"published","title":"WordPress Hide My WP Ghost plugin \u003c= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability","description":"Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.\n\nThis issue affects Hide My WP Ghost: from n/a through 7.0.09.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00266,"percentile":0.18726,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-918"],"published":"2026-09-08T07:26:40Z","modified":"2026-09-08T13:12:58Z","products":[{"vendor":"john darrel","product":"hide my wp ghost"}],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/hide-my-wp/vulnerability/wordpress-hide-my-wp-ghost-plugin-7-0-09-server-side-request-forgery-ssrf-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81806"},{"url":"https://github.com/advisories/GHSA-6v4m-2c3x-c677"}],"sources":{"cve":[{"id":"CVE-2026-81806","title":"WordPress Hide My WP Ghost plugin \u003c= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability","description":"Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.\n\nThis issue affects Hide My WP Ghost: from n/a through 7.0.09.","status":"published","published":"2026-09-08T07:26:40.367Z","modified":"2026-09-08T10:34:56.294Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T13:36:29.327819Z"}],"euvd":[{"id":"EUVD-2026-72652","description":"Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.\n\nThis issue affects Hide My WP Ghost: from n/a through 7.0.09.","status":"published","published":"2026-09-08T07:26:40Z","modified":"2026-09-08T10:34:56Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T17:28:30.317832Z"}],"ghsa":[{"id":"GHSA-6v4m-2c3x-c677","title":"Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server...","description":"Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.\n\nThis issue affects Hide My WP Ghost: from n/a through 7.0.09.","status":"published","published":"2026-09-08T09:35:38Z","modified":"2026-09-08T09:35:45Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:11:27.823827Z"}],"nvd":[{"id":"CVE-2026-81806","description":"Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.\n\nThis issue affects Hide My WP Ghost: from n/a through 7.0.09.","status":"published","published":"2026-09-08T08:17:13.267Z","modified":"2026-09-08T13:12:58.31Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:12:44.436435Z"}]}}