jpress
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 11, 2018 to present
20
Total CVEs
13
Critical+High
0
Exploited
13
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
34/100
low
Severity Distribution
Critical
2High
11Medium
6Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Code Injection
8
2
XSS
5
3
Malicious File Upload
4
4
SSRF
1
5
Path Traversal
1
Most Affected Products
1. jpress Jpress24
2. Guizhou Xiaoma Technology jpress1
Recent Vulnerabilities
See more →CVE-2026-9376
CVSS 2.1EPSS 0%low
JPress UCenter Article Submission Endpoint doWriteSave improper authorization
5/24/2026🔧 No Patch
CVE-2024-12348
CVSS 6.1medium
Guizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting
12/9/2024🔧 No Patch
CVE-2024-11971
CVSS 5.4medium
Guizhou Xiaoma Technology jpress Avatar upload cross site scripting
11/28/2024🔧 No Patch
CVE-2024-50919
CVSS 9.8critical
11/18/2024🔧 No Patch
CVE-2024-46468
CVSS 7.5high
10/11/2024🔧 No Patch
CVE-2024-8304
CVSS 5.8EPSS 0%medium
jpress Template Module edit path traversal
8/29/2024🔧 No Patch
CVE-2024-43033
CVSS 8.8high
8/22/2024🔧 No Patch
CVE-2024-32358
CVSS 7.5EPSS 0%high
4/25/2024🔧 No Patch
CVE-2022-23330
CVSS 8.8high
2/4/2022🔧 No Patch
CVE-2021-46114
CVSS 8.8high
1/26/2022🔧 No Patch
Monitor jpress in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.