p
pkp
Security Risk Profile
26
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 6, 2012 to present
12
Total CVEs
4
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
26/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
3Medium
7Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
7Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
CSRF
2
3
Path Traversal
1
Most Affected Products
1. pkp Open Journal Systems4
2. pkp Ojs4
3. Pkp.sfu Open Journal Systems3
4. pkp Pkp Web Application Library3
5. Public Knowledge Project Open Journal Systems1
Recent Vulnerabilities
See more →CVE-2026-111609
CVSS 3.8low
PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription
Oct 16, 2026🔧 No Patch
CVE-2024-24512
CVSS 6.1EPSS 0%medium
Mar 1, 2024🔧 No Patch
CVE-2024-24511
CVSS 6.1EPSS 0%medium
Mar 1, 2024🔧 No Patch
CVE-2024-25434
CVSS 5.4EPSS 0%medium
Mar 1, 2024🔧 No Patch
CVE-2024-25438
CVSS 6.1EPSS 0%medium
Mar 1, 2024🔧 No Patch
CVE-2023-5899
CVSS 8.8EPSS 0%high
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Nov 1, 2023
CVE-2023-5898
CVSS 8.8EPSS 0%high
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Nov 1, 2023
CVE-2023-5889
CVSS 8.2EPSS 0%high
Insufficient Session Expiration in pkp/pkp-lib
Nov 1, 2023
CVE-2023-4695
CVSS 9.6critical
Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
Sep 1, 2023🔧 No Patch
CVE-2012-1469
CVSS 4.3medium
Sep 6, 2012🔧 No Patch
Monitor pkp in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.