Skip to content
Noroxi

simple-press records

6 published records for vendor simple-press.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
16.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2020-36706
    40Plan

    Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 2%

    simple-press · simple\Oct 20, 2023

  • CVE-2022-4030
    33Monitor

    Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion

    HighCVSS 8.1No exploitEPSS 2%

    simple-press · simple\Nov 29, 2022

  • CVE-2022-4027
    21Monitor

    Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies

    MediumCVSS 5.4No exploitEPSS 1%

    simple-press · simple\Nov 29, 2022

  • CVE-2022-4028
    21Monitor

    Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures

    MediumCVSS 5.4No exploitEPSS 1%

    simple-press · simple\Nov 29, 2022

  • CVE-2022-4031
    19Monitor

    Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification

    MediumCVSS 4.9No exploitEPSS 1%

    simple-press · simple\Nov 29, 2022

  • CVE-2022-4029
    18Monitor

    Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value

    MediumCVSS 4.7No exploitEPSS 1%

    simple-press · simple\Nov 29, 2022