Simple-Press Simple\
6 CVEs affecting Simple-Press Simple\. Latest disclosed: 2023-10-20. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36706 | Critical | 9.8 | 2023-10-20 | The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/js… |
CVE-2022-4030 | High | 8.1 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated d… |
CVE-2022-4027 | High | 7.2 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions… |
CVE-2022-4028 | Medium | 6.4 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when… |
CVE-2022-4029 | Medium | 4.7 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the WordPress URL]' cookie value in versions… |
CVE-2022-4031 | Low | 3.8 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does n… |