Spicethemes Spicepress vulnerabilities

1 vulnerability

Known vulnerabilities in Spicethemes Spicepress, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-39621spicethemesspicepress+1
EPSS score
0.20%
Cross-Site Request Forgery (CSRF) vulnerability in spicethemes SpicePress spicepress allows Upload a Web Shell to a Web Server.This issue affects SpicePress: from n/a through <= 2.3.2.5.