What’s Vulnerable › Products

ONTRAPORT PilotPress vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your ONTRAPORT PilotPress version is affected

Latest ONTRAPORT PilotPress vulnerabilities

• CVE-2026-85659 — PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter (CVSS 8.8)
• CVE-2025-58238 — WordPress PilotPress Plugin <= 2.0.36 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-58221 — WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability (CVSS 4.3)
• CVE-2024-23524 — WordPress PilotPress plugin <= 2.0.30 - Broken Access Control vulnerability (CVSS 8.8)