Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

SecuPress vulnerabilities

5 published CVEs name SecuPress among the affected products.

Published CVEs
5
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 0Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20253
  3. 20261

Newest CVEs

  • CVE-2024-43228

    WordPress SecuPress Free plugin <= 2.2.5.3 - Broken Access Control vulnerability

    SecuPress · SecuPress Free

    Medium5.3
  • CVE-2025-3452

    SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

    secupress · SecuPress with Simple SSL – Simple and Performant Security

    Medium4.3
  • CVE-2025-30907

    WordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability

    SecuPress · SecuPress Free

    Medium6.5
  • CVE-2024-9019

    SecuPress Free — WordPress Security <= 2.2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via secupress_check_ban_ips_form Shortcode

    secupress · SecuPress with Simple SSL – Simple and Performant Security

    Medium6.4
  • CVE-2024-1504

    SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address

    secupress · SecuPress with Simple SSL – Simple and Performant Security

    Medium4.3