Simplepress

10 CVEs across 3 Simplepress products. Browse Simplepress vulnerabilities, severities, and proof-of-concept exploits.

Simplepress products with known CVEs

ProductCVEs
Simple:press Forum8
Simplepress3
Simple:press1
Simplepress CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-31386Medium5.32025-03-31Missing Authorization vulnerability in simplepress Simple:Press simplepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2024-13518Medium4.32025-03-01The Simple:Press Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.10.12. This is due to missing o…
CVE-2024-10483High7.12025-02-26The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C…
CVE-2024-12409Medium6.12025-01-30The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11…
CVE-2020-36706Critical9.82023-10-20The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/js…
CVE-2022-4031Low3.82022-11-29The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does n…
CVE-2022-4030High8.12022-11-29The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated d…
CVE-2022-4029Medium4.72022-11-29The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the WordPress URL]' cookie value in versions…
CVE-2022-4028Medium6.42022-11-29The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when…
CVE-2022-4027High7.22022-11-29The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions…