CVE Catalog
CVE-2026-39484
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
The Hide My WP Ghost plugin for WordPress has an open redirect vulnerability to untrusted sites, enabling phishing attacks. This affects versions below 7.0.00.
Risk Assessment
An attacker can redirect users to malicious sites, potentially leading to credential theft or malware installation.
Recommendation
Immediately update the Hide My WP Ghost plugin to version 7.0.00 or later.
Original NVD description (English source)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < 7.0.00.