PressForward

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

PressForward records in CISA KEV

No PressForward vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pressforward 1 record LOW

Records

2 records

TI-2017-09593 CVE-2017-12948 · GHSA-fg8f-6q25-239r

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has…

LOW 29

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2017-08-18 No fix listed CWE-79

TI-2025-20930 CVE-2025-28987 · GHSA-jc3m-32w2-ffjc

WordPress PressForward <= 5.9.4 - Server Side Request Forgery (SSRF) vulnerability

LOW 28

Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward pressforward allows Server Side Request Forgery.This issue affects PressForward: from n/a through <= 5.9.5.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00242 Published 2025-08-14 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0