Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: secupress Component: Secupress Clear all filters
TI-2025-03031 CVE-2025-3452 · GHSA-xp82-r324-2w4v

SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

Priority LOW 20

The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_plugins_admin_ajax_cb' function in all version…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00302 Published 2025-04-29 No fix listed CWE-862
TI-2025-22177 CVE-2025-30907 · GHSA-v6p2-q97p-rvqj

WordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecuPress SecuPress Free secupress allows DOM-Based XSS.This issue affects SecuPress Free: from n/a through <= 2.2.5.3…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00307 Published 2025-03-27 No fix listed CWE-79
TI-2024-08372 CVE-2024-9019 · GHSA-mc46-84hc-whf6

Cross-site scripting in SecuPress with Simple SSL – Simple and Performant Security

Priority LOW 28

The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's secupress_check_ban_ips_form shortcode in all versions up to, and including, 2.2.5.3 due to insuf…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00214 Published 2025-02-28 No fix listed CWE-79