flatpress flatpress

Name: flatpress flatpress
Brand: flatpress

productUS

cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical3high22medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-35241US	medium4.8	2.17% (82nd)	Exploit	no fix	2020-12-30	= 1.0.3
CVE-2008-4120US	medium4.3	1.76% (78th)	Exploit	no fix	2008-09-29	= 0.804
CVE-2009-4461US	medium4.3	1.47% (74th)	Exploit	no fix	2009-12-30	= 0.909
CVE-2024-31835US	medium4.8	1.07% (65th)	Exploit	1.3	2024-10-01	< 1.3
CVE-2024-25412US	medium6.1	1.02% (63rd)	Exploit	1.3	2024-09-27	< 1.3
CVE-2024-33209US	medium5.4	0.86% (58th)	Exploit	no fix	2024-10-02	= 1.3
CVE-2024-25411US	—	0.85% (58th)	Exploit	1.3	2024-09-27	< 1.3
CVE-2024-33210US	—	0.67% (52nd)	Exploit	no fix	2024-10-02	= 1.3
CVE-2025-25460US	—	0.55% (46th)	Exploit	no fix	2025-02-24	= 1.3.1
CVE-2024-41290US	—	0.43% (37th)	Exploit	no fix	2024-10-02	= 1.3.1
CVE-2025-44108US	—	0.35% (28th)	Exploit	1.4	2025-05-19	< 1.4
CVE-2025-29602US	—	0.29% (21st)	Exploit	no fix	2025-05-07	≤ 1.3.1
CVE-2022-4606US	critical9.8	35.4% (98th)	—	no fix	2022-12-18	≤ 1.2.1
CVE-2023-0947US	critical9.8	3.64% (90th)	—	no fix	2023-02-22	≤ 1.2.1
CVE-2014-100036US	medium4.3	1.89% (79th)	—	no fix	2015-01-13	= 1.0.2
CVE-2021-41432US	medium5.4	1.75% (78th)	—	no fix	2022-06-23	= 1.2.1
CVE-2022-40048US	high7.2	1.71% (77th)	—	no fix	2022-09-29	= 1.2.1
CVE-2022-40047US	medium5.4	1.42% (73rd)	—	no fix	2022-10-11	= 1.2.1
CVE-2022-4748US	critical9.8	0.94% (61st)	—	no fix	2022-12-27	—
CVE-2024-4023US	—	0.81% (57th)	—	no fix	2025-03-20	= 1.3
CVE-2020-22761US	high8.8	0.76% (55th)	—	no fix	2021-07-30	= 1.1
CVE-2023-1105US	high8.1	0.71% (53rd)	—	2022-12-25	2023-03-01	< 2022-12-25
CVE-2022-24588US	medium5.4	0.71% (53rd)	—	no fix	2022-02-15	= 1.2.1
CVE-2023-1104US	medium5.4	0.60% (48th)	—	1.3	2023-03-01	< 1.3
CVE-2023-1106US	medium6.1	0.58% (47th)	—	1.3	2023-03-02	< 1.3
CVE-2022-4605US	medium5.4	0.57% (47th)	—	no fix	2022-12-18	≤ 1.2.1
CVE-2022-4755US	medium6.1	0.56% (47th)	—	no fix	2022-12-27	—
CVE-2022-4820US	medium6.1	0.54% (45th)	—	no fix	2022-12-28	—
CVE-2022-4822US	medium6.1	0.53% (45th)	—	no fix	2022-12-28	—
CVE-2022-4821US	medium6.1	0.53% (45th)	—	no fix	2022-12-28	—
CVE-2023-1148US	medium4.8	0.53% (45th)	—	1.3	2023-03-02	< 1.3
CVE-2023-1107US	medium5.4	0.52% (44th)	—	1.3	2023-03-02	< 1.3
CVE-2023-1147US	medium5.4	0.48% (41st)	—	1.3	2023-03-02	< 1.3
CVE-2023-1146US	medium5.4	0.48% (41st)	—	1.3	2023-03-02	< 1.3
CVE-2024-9699US	medium5.4	0.36% (29th)	—	1.4	2025-03-20	< 1.4
CVE-2024-9847US	—	0.34% (28th)	—	1.4	2025-03-20	< 1.4

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')28 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-315Cleartext Storage of Sensitive Information in a Cookie1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-73External Control of File Name or Path1 CVEs
CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan