Skip to content
OpenAdvisories

Vendor

simplepress

9 known vulnerabilities.

Products

Simple:Press Forum 8 Simple:Press 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36706

    Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload

    The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/jscript/ajaxupload/sf-uploader.php file in versions up to, and including, 6.6.0. This makes it possibl…

    simplepress Simple:Press Forum Web / CMS