Ghost CMS flaw abused to push ClickFix attacks on hundreds of sitesSecurity Affairs·May 25, 18:07 UTC · May 25, 2026Vulnerability in the wildCVE-2026-2698060
Vulnerability Spotlight: XSS vulnerability in Ghost CMSCisco Talos·Jan 19, 20:01 UTC · Jan 19, 2023Vulnerability in the wildCVE-2022-47194CVE-2022-4719760
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix AttacksThe Hacker News·Jun 26, 07:33 UTC · Jun 26, 2026VulnerabilityCVE-2026-2698060
Vulnerability Spotlight: Node-SQLite3 issue could lead to denial of service in Ghost CMSCisco Talos·Mar 16, 18:32 UTC · Mar 16, 2023Vulnerability in the wildCVE-2022-4344160
Vulnerability Spotlight: Authentication bypass and enumeration vulnerabilities in Ghost CMSCisco Talos·Dec 21, 17:43 UTC · Dec 21, 2022Vulnerability in the wildCVE-2022-41654CVE-2022-4169760
Ghost Squad Hackers defaced a second European Space Agency (ESA) site in a weekSecurity Affairs·Jul 19, 18:57 UTC · Jul 19, 2020Vulnerability42