Ghost

Category - Headless CMS, CMS

Ghost is the world's most popular open source headless Node.js CMS — it ships with a default admin client and front-end, but you can also swap them out with your own JAMstack.


We have discovered  17,638 live websites   are using Ghost.

Download Lead List
[Download a sample report]


Technology usage statistics

Websites using Ghost:17,638 websites
Most popular in: United States
Market position in Headless CMS category:#1
Market share in Headless CMS:24.60%
Most popular version:6.19

Security vulnerabilites

Top 10 most common security vulnerabilities associated with Ghost
PublishedCVETitleDomains
Mar, 2026CVE-2026-29053Ghost Vulnerable to Remote Code Execution via Malicious Themes12,811
Feb, 2026CVE-2026-26980Ghost has a SQL Injection in its Content API11,397
Mar, 2026CVE-2026-29784Ghost: Incomplete CSRF protections around OTC use7,585
Jan, 2026CVE-2026-24778Ghost vulnerable to XSS via malicious Portal preview links5,550
Jan, 2026CVE-2026-22597Ghost has SSRF via External Media Inliner4,937
Aug, 2023CVE-2023-40028Arbitrary file read via symlinks in Ghost4,574
Jan, 2026CVE-2026-22596Ghost has SQL Injection in Members Activity Feed3,835
Jan, 2026CVE-2026-22594Ghost has Staff 2FA bypass3,357
Apr, 2022CVE-2022-28397An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attacke...3,341
Jan, 2026CVE-2026-22595Ghost has Staff Token permission bypass2,674

Technology adoption

Recent changes in Ghost usage.
Websites that added Ghost 1,661
Websites that dropped Ghost 349
Websites that changed version of Ghost  13,754

Available Reports


Technology Information


Major Versions

  • 6.xx (21 subversions, 6,595 domains)
  • 5.xx (128 subversions, 3,548 domains)
  • 4.xx (43 subversions, 1,259 domains)
  • 3.xx (43 subversions, 971 domains)
  • 2.xx (34 subversions, 388 domains)
  • 1.xx (17 subversions, 236 domains)
  • 0.xx (9 subversions, 885 domains)

Website Distribution by Country

Number of websites using Ghost
United States12,141 websites


Germany1,313 websites
France510 websites
GB460 websites
Hong Kong323 websites
Singapore292 websites
Poland260 websites
Canada214 websites
Russia202 websites
China142 websites

Website Distribution by TLD

Number of websites using Ghost
.com8,791 websites
.io1,548 websites
.org876 websites
.net682 websites
.de530 websites
.me333 websites
.co.uk305 websites
.pl246 websites
.co235 websites
.fr191 websites

Ghost Versions

sorted by popularity
6.191,375 websites
6.10904 websites
6.17711 websites
6.12638 websites
5.130571 websites
6.13542 websites
6.18522 websites
6.20484 websites
6391 websites
4.48381 websites

See all Ghost versions ...

Top Websites Using Ghost

A look at the most popular websites built with Ghost
DomainCountryRankContacts
jsdelivr.com United States151
simplebits.com United States903
a.wholelottanothing.org United States981
dev.to United States3,430
ghost.org Singapore3,607
appfleet.com United States3,815
See full domain list

Always Used together


Node.js: Total 789,835 domains found using Node.js
Category - Programming Languages. 23,245,520 domains found using Programming Languages

Alternative Technologies


Contentful: Total 15,581 domains found using Contentful
Sanity: Total 12,294 domains found using Sanity
Prismic: Total 8,997 domains found using Prismic
Storyblok: Total 5,545 domains found using Storyblok
DatoCMS: Total 3,042 domains found using DatoCMS
dotCMS: Total 1,741 domains found using dotCMS
Builder: Total 1,194 domains found using Builder
Contentstack: Total 1,107 domains found using Contentstack
Hygraph: Total 1,055 domains found using Hygraph
microCMS: Total 802 domains found using microCMS

FAQ

Ghost falls under the categories of Headless CMS, and Content Management System.
WebTechSurvey systematically indexes websites and their technologies. Users can find websites using Ghost through the WebTechSurvey platform.
There are currently 59,130,664 live websites that use Ghost.
The main competitors to Ghost include Contentful, Sanity, Prismic, and Storyblok.
Ghost has a known security vulnerabilities: CVE-2026-29784, CVE-2026-29053, CVE-2026-26980, and CVE-2026-24778.