Yandaozi Ppress
4 CVEs affecting Yandaozi Ppress. Latest disclosed: 2025-09-19. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-54815 | High | 8.8 | 2025-09-19 | Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes. |
CVE-2025-52159 | High | 8.8 | 2025-09-19 | Hardcoded credentials in default configuration of PPress 0.0.9. |
CVE-2025-54761 | High | 8.0 | 2025-09-19 | An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie. |
CVE-2025-25973 | Medium | 6.5 | 2025-02-20 | A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a… |