WordPress plugin
Simple Page Ordering security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low2
All Simple Page Ordering vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Missing Authorization to Information Disclosure <2.5.1Update to 2.5.1 | CVE-2023-32798 | |
| Low3.7 | Regular Expression Denial of Service ≤4.3.1Update to 4.4.0 | CVE-2022-37599 | |
| Low3.7 | Regular Expression Denial of Service ≤4.3.1Update to 4.4.0 | CVE-2022-37603 | |
| Medium5.3 | Open Redirect ≤1.11.1Update to 2.0.0 | CVE-2022-33987 |
- Medium5.4Missing Authorization to Information Disclosure
<2.5.1Update to 2.5.1
- Low3.7Regular Expression Denial of Service
≤4.3.1Update to 4.4.0
- Low3.7Regular Expression Denial of Service
≤4.3.1Update to 4.4.0
- Medium5.3Open Redirect
≤1.11.1Update to 2.0.0
Simple Page Ordering: common questions
Does Simple Page Ordering have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Simple Page Ordering: 2 medium, 2 low. None are known to affect version null.
How do I check which version of Simple Page Ordering I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple Page Ordering vulnerability?
CVE-2023-32798, published May 16, 2023: Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure. Severity: Medium (CVSS 5.4).
Is any Simple Page Ordering vulnerability listed in CISA KEV?
No. None of the known Simple Page Ordering vulnerabilities is currently listed in the CISA KEV catalog.