SecuPress with Simple SSL – Simple and Performant Security
secupress · plugin
Known security vulnerabilities for SecuPress with Simple SSL – Simple and Performant Security. Find out in seconds which version runs on your site with WP Lens.
5 known vulnerabilities
latest Feb 20, 2026
Vulnerabilities
- Medium 5.4
WordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability
- Medium 5.4
SecuPress Free — WordPress Security <= 2.2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via secupress_check_ban_ips_form Shortcode
- Medium 5.3
WordPress SecuPress Free plugin <= 2.2.5.3 - Broken Access Control vulnerability
- Medium 4.3
SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
- Medium 4.3
SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address