ONTRAPORT

Products

ProductCVEsExploitedLatest
PilotPress3–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-85659 High 8.8 PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter 0.4%
  • CVE-2025-58221 Medium 4.3 WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-58238 Medium 6.5 WordPress PilotPress Plugin <= 2.0.36 - Cross Site Scripting (XSS) Vulnerability 0.3%