VendorsSimple:Presssimple%5Call versions
Vulnerabilities

Simple:Press Simple

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

6CVEs
CVE-2020-36706
Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload
Published 2023-10-20 · Modified
9.8EPSS 0.022
CVE-2022-4030
Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion
Published 2022-11-29 · Modified
8.1EPSS 0.017
CVE-2022-4027
Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies
Published 2022-11-29 · Modified
7.2EPSS 0.006
CVE-2022-4028
Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures
Published 2022-11-29 · Modified
6.4EPSS 0.006
CVE-2022-4031
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification
Published 2022-11-29 · Modified
4.9EPSS 0.008
CVE-2022-4029
Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value
Published 2022-11-29 · Modified
4.7EPSS 0.006