Ghost: Mobiledoc image-size fetch SSRF

Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card a...

CVE-2026-59529

Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...

CVE-2026-65452

Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...

CVE-2026-65453

Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...

CVE-2026-65453 WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...

CVE-2026-27368

Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a...