Plugin icon

Simple:Press Forum

simplepress

Vulnerabilities:

9

Last Updated:

January 29, 2026

Active Installs:

300

Published
Title
Fixed in
CVSS
Published
2025-03-31
Title
Simple:Press < 6.11.6 - Missing Authorization
Fixed in
Fixed in 6.11.6
CVSS
5.3 (medium)
Published
2025-02-28
Title
Simple:Press < 6.10.13 - Cross-Site Request Forgery to Unauthorized Post Editing
Fixed in
Fixed in 6.10.13
CVSS
4.3 (medium)
Published
2025-02-05
Title
SimplePress Forum < 6.10.11 - Reflected XSS
Fixed in
Fixed in 6.10.11
CVSS
7.1 (high)
Published
2025-01-29
Title
Simple:Press Forum < 6.10.12 - Reflected Cross-Site Scripting
Fixed in
Fixed in 6.10.12
CVSS
6.1 (medium)
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Subscriber+ Stored XSS via Profile Signatures
Fixed in
Fixed in 6.8.1
CVSS
6.4 (medium)
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Unauthenticated Stored XSS via Forum Replies
Fixed in
Fixed in 6.8.1
CVSS
7.2 (high)
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Admin+ Arbitrary File Update
Fixed in
Fixed in 6.8.1
CVSS
3.8 (low)
Published
2022-11-29
Title
Simple:Press < 6.8.1 - Subscriber+ Arbitrary File Deletion
Fixed in
Fixed in 6.8.1
CVSS
8.1 (high)
Published
2020-09-25
Title
Simple:Press < 6.6.1 - Broken Access Control leading to RCE
Fixed in
Fixed in 6.6.1
CVSS
10.0 (critical)