Ssimplepress

Products

Exploited and recent CVEs

• CVE-2025-31386 Medium 5.3 WordPress Simple:Press plugin <= 6.11.5 - Broken Access Control vulnerability 0.3%
• CVE-2024-13518 Medium 4.3 Simple:Press <= 6.10.12 - Cross-Site Request Forgery to Unauthorized Post Editing 0.2%
• CVE-2024-12409 Medium 6.1 Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting 0.4%
• CVE-2020-36706 Critical 9.8 Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload 2.2%
• CVE-2022-4031 Low 3.8 Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification 0.8%
• CVE-2022-4030 High 8.1 Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion 1.7%
• CVE-2022-4029 Medium 4.7 Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value 0.6%
• CVE-2022-4028 Medium 6.4 Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures 0.6%
• CVE-2022-4027 High 7.2 Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies 0.6%