Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-28987 2 Pressforward, Wordpress 2 Pressforward, Wordpress 2026-04-01 N/A
Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward pressforward allows Server Side Request Forgery.This issue affects PressForward: from n/a through <= 5.9.5.
CVE-2017-12948 1 Pressforward 1 Pressforward 2025-04-20 N/A
Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.