What’s Vulnerable › Products

Simple-Press Simple:Press vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Simple-Press Simple:Press version is affected

Latest Simple-Press Simple:Press vulnerabilities

• CVE-2020-36706 — Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload (CVSS 9.8)
• CVE-2022-4031 — Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification (CVSS 4.9)
• CVE-2022-4030 — Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion (CVSS 8.1)
• CVE-2022-4029 — Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value (CVSS 4.7)
• CVE-2022-4028 — Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures (CVSS 5.4)
• CVE-2022-4027 — Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies (CVSS 5.4)