File and Path Handling

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Arbitrary file read via symlinks in GhostCVE-2023-40028TryGhost · CVSS 4.9 · 66% likely

   CWE-22

2. Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation FilesCVE-2026-104418TryGhost · CVSS 7.2 · 0.7% likely

   CWE-22

3. Ghost: Remote Code Execution via Theme Translation FilesCVE-2026-105677TryGhost · CVSS 7.2 · 0.5% likely

   CWE-22

4. Ghost: Database Backup Path TraversalCVE-2026-70592TryGhost · CVSS 5.5 · 0.4% likely

   CWE-22

5. Ghost: Theme Upload Path TraversalCVE-2026-70593TryGhost · CVSS 6.6 · 0.4% likely

   CWE-22

6. Ghost: Path Traversal via Locale SettingCVE-2026-105676TryGhost · CVSS 4.9 · 0.4% likely

   CWE-22

7. Ghost 1.20.0 before 6.64.0 Path Traversal via Locale SettingCVE-2026-104417TryGhost · CVSS 4.9 · 0.4% likely

   CWE-22

8. Ghost: Path Traversal Vulnerability in Ghost ImageSize ServiceCVE-2026-105683TryGhost · CVSS 3.8 · 0.3% likely

   CWE-35

9. Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSizeCVE-2026-103290TryGhost · CVSS 3.8 · 0.3% likely

   CWE-35

10. Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframeCVE-2026-103278TryGhost · CVSS 7.3 · 0.3% likely

    CWE-23

11. Ghost: File Upload Content-Type SpoofingCVE-2026-53948TryGhost · CVSS 5.4 · 0.2% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.