{"items":[{"id":"CVE-2025-31386","published":"2025-03-31T09:32:20.296Z","updated":"2026-04-28T16:12:05.621Z","title":"WordPress Simple:Press plugin <= 6.11.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"simplepress","product":"Simple:Press","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-13518","published":"2025-03-01T04:21:49.340Z","updated":"2026-04-08T16:49:23.963Z","title":"Simple:Press <= 6.10.12 - Cross-Site Request Forgery to Unauthorized Post Editing","severity":"MEDIUM","score":4.3,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2024-12409","published":"2025-01-30T11:10:19.927Z","updated":"2026-04-08T17:18:08.882Z","title":"Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2020-36706","published":"2023-10-20T06:35:22.945Z","updated":"2026-04-08T16:53:12.404Z","title":"Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.02174,"kevAdded":null},{"id":"CVE-2022-4031","published":"2022-11-29T20:15:59.914Z","updated":"2026-04-08T16:40:49.935Z","title":"Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification","severity":"LOW","score":3.8,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.00753,"kevAdded":null},{"id":"CVE-2022-4030","published":"2022-11-29T20:13:25.260Z","updated":"2026-04-08T16:49:11.427Z","title":"Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion","severity":"HIGH","score":8.1,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.01725,"kevAdded":null},{"id":"CVE-2022-4029","published":"2022-11-29T20:10:24.741Z","updated":"2026-04-08T16:53:32.739Z","title":"Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value","severity":"MEDIUM","score":4.7,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.00628,"kevAdded":null},{"id":"CVE-2022-4028","published":"2022-11-29T20:08:35.119Z","updated":"2026-04-08T17:30:23.401Z","title":"Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures","severity":"MEDIUM","score":6.4,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2022-4027","published":"2022-11-29T20:06:05.069Z","updated":"2026-04-08T16:49:55.731Z","title":"Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies","severity":"HIGH","score":7.2,"vendor":"simplepress","product":"Simple:Press Forum","kev":false,"epss":0.00643,"kevAdded":null}]}