Plugin icon

SecuPress with Simple SSL – Simple and Performant Security

secupress

Vulnerabilities:

6

Last Updated:

April 3, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2025-04-28
Title
SecuPress Free < 2.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Fixed in
Fixed in 2.3.10
CVSS
4.3 (medium)
Published
2025-03-27
Title
SecuPress Free < 2.2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.5.4
CVSS
6.4 (medium)
Published
2025-03-11
Title
SecuPress Free < 2.3 - Missing Authorization
Fixed in
Fixed in 2.3
CVSS
5.3 (medium)
Published
2025-02-27
Title
SecuPress Free < 2.3 - Contributor+ Stored XSS
Fixed in
Fixed in 2.3
CVSS
5.9 (medium)
Published
2024-04-01
Title
SecuPress Free — WordPress Security < 2.2.5.2 - Cross-Site Request Forgery to Banned IP Address
Fixed in
Fixed in 2.2.5.2
CVSS
4.3 (medium)
Published
2021-03-23
Title
SecuPress < 2.0 - Unauthenticated Arbitrary IP Ban
Fixed in
Fixed in 2.0
CVSS
5.3 (medium)