Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.8 via the 'file' parameter which does not properly restrict files to be edited in the context of the plugin. This makes it possible with attackers, with high-level permissions such as an administrator, to supply paths to arbitrary files on the server that can be modified outside of the intended scope of the plugin.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| simplepress | Simple:Press Forum | up to 6.8 | — | No fix listed | CNA |
- Simple:Press Forum Vendorsimplepress Affected up to 6.8 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:simple-press:simple\:press:*:*:*:*:*:wordpress:*:* | press | Vulnerable | Simple-press |
- cpe:2.3:a:simple-press:simple\:press:*:*:*:*:*:wordpress:*:* Versions press Vulnerable ·Simple-press
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4031
- 2026-10-03 Alias added: GHSA-jxgp-hq49-3gq9
References
More simplepress vulnerabilities
- TI-2024-09711 SimplePress Forum < 6.10.11 - Reflected XSS CVSS 3.1HIGH 7.1
- TI-2020-18877 Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload CVSS 3.1CRITICAL 9.8
- TI-2022-03698 Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion CVSS 3.1HIGH 8.1
- TI-2022-03695 Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies CVSS 3.1HIGH 7.2
- TI-2025-22567 WordPress Simple:Press plugin <= 6.11.5 - Broken Access Control vulnerability CVSS 3.1MEDIUM 5.3
- TI-2022-03696 Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures CVSS 3.1MEDIUM 6.4
Sources
- CVE-2022-4031 · CVE Program
- CVE-2022-4031 · NVD
- FIRST EPSS
- GHSA-jxgp-hq49-3gq9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences