CVE-2026-39484

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through < 7.0.00.

Score

CVSS 3.1 4.7 Medium

Status

Deferred - audit@patchstack.com

Published

2026-04-08

Last modified

2026-10-23

Weaknesses

CWE-601

Affected products

• Hide My Wp Ghost (John Darrel)

References

• https://patchstack.com/database/Wordpress/Plugin/hide-my-wp/vulnerability/wordpress-hide-my-wp-ghost-plugin-7-0-00-open…