Simplepress
9 CVEs across 3 Simplepress products. Browse Simplepress vulnerabilities, severities, and proof-of-concept exploits.
Simplepress products with known CVEs
Simplepress CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-31386 | Medium | 5.3 | 2025-03-31 | Missing Authorization vulnerability in simplepress Simple:Press simplepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-13518 | Medium | 4.3 | 2025-03-01 | The Simple:Press Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.10.12. This is due to missing o… |
CVE-2024-10483 | High | 7.1 | 2025-02-26 | The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C… |
CVE-2024-12409 | Medium | 6.1 | 2025-01-30 | The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11… |
CVE-2020-36706 | Critical | 9.8 | 2023-10-20 | The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/js… |
CVE-2022-4031 | Low | 3.8 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does n… |
CVE-2022-4030 | High | 8.1 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated d… |
CVE-2022-4029 | Medium | 4.7 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the WordPress URL]' cookie value in versions… |
CVE-2022-4028 | Medium | 6.4 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when… |
CVE-2022-4027 | High | 7.2 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions… |