PatchTheCVEflatpress vulnerabilities
Recent CVEs affecting flatpress products. 9 tracked.
flatpress has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-05-19. Highest priority: CVE-2024-4023 (score 48/100).
- CVE-2025-44108 MEDIUM 4.8 UPGRADE A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1
- CVE-2025-29602 MEDIUM 6.1 UPGRADE flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.
- CVE-2025-25460 MEDIUM 4.8 DOWNGRADE A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" fea
- CVE-2024-9847 HIGH 8.0 UPGRADE FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker
- CVE-2024-9699 MEDIUM 5.4 UPGRADE A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an a
- CVE-2024-4023 HIGH 8.1 DOWNGRADE A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3
- CVE-2024-31835 MEDIUM 4.8 UPGRADE Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitra
- CVE-2024-25412 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts
- CVE-2024-25411 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts
FAQ
How do I fix flatpress vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flatpress being exploited right now?
None of the tracked flatpress CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flatpress CVE should I patch first?
CVE-2024-4023 currently ranks highest (48/100): A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3.