WordPress plugin
SecuPress with Simple SSL – Simple and Performant Security security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium5
- Low0
All SecuPress with Simple SSL – Simple and Performant Security vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation ≤2.3.9Update to 2.3.10 | CVE-2025-3452 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.2.5.3Update to 2.2.5.4 | CVE-2025-30907 | |
| Medium5.3 | Missing Authorization ≤2.2.5.3Update to 2.3 | CVE-2024-43228 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via secupress_check_ban_ips_form Shortcode ≤2.2.5.3Update to 2.3 | CVE-2024-9019 | |
| Medium4.3 | Cross-Site Request Forgery to Banned IP Address ≤2.2.5.1Update to 2.2.5.2 | CVE-2024-1504 | |
| High7.5 | Unauthenticated Arbitrary IP Ban <2.0Update to 2.0 | — |
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
≤2.3.9Update to 2.3.10
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.2.5.3Update to 2.2.5.4
- Medium5.3Missing Authorization
≤2.2.5.3Update to 2.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via secupress_check_ban_ips_form Shortcode
≤2.2.5.3Update to 2.3
- Medium4.3Cross-Site Request Forgery to Banned IP Address
≤2.2.5.1Update to 2.2.5.2
- High7.5Unauthenticated Arbitrary IP Ban
<2.0Update to 2.0
SecuPress with Simple SSL – Simple and Performant Security: common questions
Does SecuPress with Simple SSL – Simple and Performant Security have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in SecuPress with Simple SSL – Simple and Performant Security: 1 high, 5 medium. None are known to affect version null.
How do I check which version of SecuPress with Simple SSL – Simple and Performant Security I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SecuPress with Simple SSL – Simple and Performant Security vulnerability?
CVE-2025-3452, published Apr 28, 2025: SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation. Severity: Medium (CVSS 4.3).
Is any SecuPress with Simple SSL – Simple and Performant Security vulnerability listed in CISA KEV?
No. None of the known SecuPress with Simple SSL – Simple and Performant Security vulnerabilities is currently listed in the CISA KEV catalog.