Hide My WP Ghost – Security Plugin, CVE-2025-26909

CVE, Research URL: CVE-2025-26909
Home page URL: Security reports for Hide My WP Ghost – Security Plugin
Application: Hide My WP Ghost – Security Plugin
Published on: Mar 27, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in John Darrel Hide My WP Ghost allows PHP Local File Inclusion.This issue affects Hide My WP Ghost: from n/a through 5.4.01.
Affected versions: max 5.4.02.
Status: vulnerable

Hide My WP Ghost &#8211; Security Plugin, CVE-2025-26909