Simplepress Simple:press vulnerabilities

• simplepress simple:press WordPress Simple:Press plugin <= 6.11.5 - Broken Access Control vulnerability CVE-2025-31386 5.3 MediumMarch 31, 2025
• simplepress simple:press forum, simplepress +1 more Simple:Press <= 6.10.12 - Cross-Site Request Forgery to Unauthorized Post Editing CVE-2024-13518 4.3 MediumMarch 1, 2025
• simplepress simple:press forum, simplepress +1 more SimplePress Forum < 6.10.11 - Reflected XSS CVE-2024-10483 7.1 HighFebruary 26, 2025
• simplepress simple:press forum, simplepress +1 more Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting CVE-2024-12409 6.1 MediumJanuary 30, 2025
• simple-press simple\, simplepress simple:press forum, thesimplepressforumteam simple\:press forum +2 more Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload CVE-2020-36706 9.8 CriticalOctober 20, 2023
• simple-press simple\, simplepress simple:press forum +1 more Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification CVE-2022-4031 3.8 LowNovember 29, 2022
• simple-press simple\, simplepress simple:press forum +1 more Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion CVE-2022-4030 8.1 HighNovember 29, 2022
• simple-press simple\, simplepress simple:press forum +1 more Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value CVE-2022-4029 4.7 MediumNovember 29, 2022
• simple-press simple\, simplepress simple:press forum +1 more Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures CVE-2022-4028 6.4 MediumNovember 29, 2022
• simple-press simple\, simplepress simple:press forum +1 more Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies CVE-2022-4027 7.2 HighNovember 29, 2022