GeneratePress
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| GeneratePress Premium | 1 | – | Feb 5, 2024 |
| GP Premium | 1 | – | Jun 5, 2024 |
Exploited and recent CVEs
- CVE-2024-3469 GP Premium <= 2.4.0 - Reflected Cross-Site Scripting 0.6%
- CVE-2023-6807 GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta 0.5%