Server-Side Request Forgery

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Ghost: Server-Side Request Forgery in Image FetchingCVE-2026-70591TryGhost · CVSS 4.1 · 0.4% likely

   CWE-918

2. Ghost has SSRF via External Media InlinerCVE-2026-22597TryGhost · CVSS 5.1 · 0.3% likely

   CWE-918

3. Ghost: Server-Side Request Forgery Mitigation IssueCVE-2026-70595TryGhost · CVSS 4 · 0.3% likely

   CWE-918

4. Ghost: Server-Side Request Forgery in Webhook TriggerCVE-2026-105682TryGhost · CVSS 2.7 · 0.2% likely

   CWE-918

5. Ghost: Mobiledoc image-size fetch SSRFCVE-2026-53946TryGhost · CVSS 5.4 · 0.2% likely

   CWE-918

6. Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via WebhookCVE-2026-103287TryGhost · CVSS 2.7 · 0.2% likely

   CWE-918

7. Ghost 3.20.2 before 6.51.0 SSRF via image-size fetchCVE-2026-103291TryGhost · CVSS 6.4 · 0.1% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.