Skip to content
OpenAdvisories

Vendor

simplepress

9 known vulnerabilities.

Products

Simple:Press Forum 8 Simple:Press 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2022-4030

    Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion

    The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated during user avatar deletion. This makes it possible with attackers, with minimal permissions such as …

    simplepress Simple:Press Forum Web / CMS
  • High 7.2
    CVE-2022-4027

    Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies

    The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions up to, and including, 6.8 due to insufficient input sanitization and output escaping that makes inj…

    simplepress Simple:Press Forum Web / CMS