PatchTheCVEppress vulnerabilities and fixes
Recent CVEs affecting ppress, with upgrade or downgrade steps. 4 tracked.
ppress has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-09-19. Highest priority: CVE-2025-54815 (score 48/100).
- CVE-2025-54815 HIGH 8.8 DOWNGRADE Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code
- CVE-2025-54761 HIGH 8.0 DOWNGRADE An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session co
- CVE-2025-52159 HIGH 8.8 DOWNGRADE Hardcoded credentials in default configuration of PPress 0.0.9.
- CVE-2025-25973 MEDIUM 6.5 DOWNGRADE A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows
FAQ
How do I fix ppress vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ppress being exploited right now?
None of the tracked ppress CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ppress CVE should I patch first?
CVE-2025-54815 currently ranks highest (48/100): Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code.