ONTRAPORT PilotPress

• CVE-2026-85659 High 8.8 PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter 0.4%
• CVE-2025-58221 Medium 4.3 WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability 0.2%
• CVE-2025-58238 Medium 6.5 WordPress PilotPress Plugin <= 2.0.36 - Cross Site Scripting (XSS) Vulnerability 0.3%