SecuPress vulnerabilities
5 published CVEs name SecuPress among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-43228
WordPress SecuPress Free plugin <= 2.2.5.3 - Broken Access Control vulnerability
SecuPress · SecuPress Free
Medium5.3 - CVE-2025-3452
SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
secupress · SecuPress with Simple SSL – Simple and Performant Security
Medium4.3 - CVE-2025-30907
WordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability
SecuPress · SecuPress Free
Medium6.5 - CVE-2024-9019
SecuPress Free — WordPress Security <= 2.2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via secupress_check_ban_ips_form Shortcode
secupress · SecuPress with Simple SSL – Simple and Performant Security
Medium6.4 - CVE-2024-1504
SecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address
secupress · SecuPress with Simple SSL – Simple and Performant Security
Medium4.3