https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-54815.htmlhttps://patchthecve.com/cve/CVE-2025-54815.htmlWed, 17 Jun 2026 09:40:45 +0000HIGH 8.8: Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.https://patchthecve.com/cve/CVE-2025-54761.htmlhttps://patchthecve.com/cve/CVE-2025-54761.htmlWed, 17 Jun 2026 09:40:39 +0000HIGH 8.0: An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.https://patchthecve.com/cve/CVE-2025-52159.htmlhttps://patchthecve.com/cve/CVE-2025-52159.htmlWed, 17 Jun 2026 09:36:01 +0000HIGH 8.8: Hardcoded credentials in default configuration of PPress 0.0.9.https://patchthecve.com/cve/CVE-2025-25973.htmlhttps://patchthecve.com/cve/CVE-2025-25973.htmlWed, 17 Jun 2026 09:01:22 +0000MEDIUM 6.5: A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters.