uPress vulnerabilities

Products

• Enable Accessibility 3
• Booter 1

Latest uPress CVEs

Newest publication first

1. CVE-2026-24534 WordPress Booter plugin <= 1.5.7 - Broken Access Control vulnerability

   Published 2026-01-23

   Medium·CVSS 4.3 EPSS 0.26%

   Missing Authorization vulnerability in uPress Booter booter-bots-crawlers-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booter: from n/a through <= 1.5.7.

2. CVE-2024-9208 Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting

   Published 2025-01-07

   Medium·CVSS 6.1 EPSS 0.30%

   The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attacke...

3. CVE-2023-30484 WordPress Enable Accessibility Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-05-25

   High·CVSS 8.8 EPSS 0.26%

   Cross-Site Request Forgery (CSRF) vulnerability in uPress Enable Accessibility plugin <= 1.4 versions.

4. CVE-2022-47149 WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-05-25

   High·CVSS 8.8 EPSS 0.30%

   Cross-Site Request Forgery (CSRF) vulnerability in Pretty Links plugin <= 3.4.0 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.