simplepress vulnerabilities

CVEs per yearBy the year they were published

1. 20225
2. 20231
3. 20253

Newest CVEs

• CVE-2025-31386

  WordPress Simple:Press plugin <= 6.11.5 - Broken Access Control vulnerability

  simplepress · Simple:Press

  Medium5.3
• CVE-2024-13518

  Simple:Press <= 6.10.12 - Cross-Site Request Forgery to Unauthorized Post Editing

  simplepress · Simple:Press Forum

  Medium4.3
• CVE-2024-12409

  Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting

  simplepress · Simple:Press Forum

  Medium6.1
• CVE-2020-36706

  Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload

  simplepress · Simple:Press Forum

  Critical9.8
• CVE-2022-4031

  Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification

  simplepress · Simple:Press Forum

  Low3.8
• CVE-2022-4030

  Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion

  simplepress · Simple:Press Forum

  High8.1
• CVE-2022-4029

  Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value

  simplepress · Simple:Press Forum

  Medium4.7
• CVE-2022-4028

  Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures

  simplepress · Simple:Press Forum

  Medium6.4
• CVE-2022-4027

  Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies

  simplepress · Simple:Press Forum

  High7.2