CVE-2026-59817

MEDIUM

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

Title source: cna
STIX 2.1

Description

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout metadata and obtain full paid gift memberships for a minimal payment without exposing customer or member data or stealing money from a site or its members. This issue is fixed in version 6.44.0.

References (5)

Core 5

Scores

CVSS v3 5.3
EPSS 0.0026
EPSS Percentile 17.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-472 CWE-639
Status published
Products (1)
TryGhost/Ghost >= 6.27.0, < 6.44.0
Published Jul 09, 2026
Tracked Since Jul 09, 2026