Simple-press vulnerabilities
We track 1 vulnerability in Simple-press products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 29, 2022.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Simple-press vulnerabilities
- 8.1 High severity
Simple:Press Forum: Improper Limitation of a Pathname to a Restricted Directory
The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'file' parameter which can be manipulated during user avatar deletion. This makes it possible with attackers, with minimal permissions such as a