Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability
CVE-2026-59546
Description
Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions.
Affected products
1- Range: <=7.0.06
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)Wordfence Blog · Jul 30, 2026