DukaPress

DukaPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Path Traversal, SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

8.2/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all DukaPress vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-2466

DukaPress <= 3.2.4 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-03-12 00:00	DukaPress <= 3.2.4 - Unauthenticated Stored Cross-Site Scripting DukaPress <= 3.2.4	`CVE-2026-2466`	7.2 High	Vuln Seeker Cyber Security Team	No
2015-08-22 00:00	DukaPress <= 2.5.9 - Blind SQL Injection DukaPress <= 2.5.9	`CVE-2015-1000011`	9.8 Critical	Larry W. Cashdollar	Yes
2014-11-13 00:00	DukaPress < 2.5.4 - Directory Traversal DukaPress < 2.5.4	`CVE-2014-8799`	7.5 High	Kacper Szurek	Yes

Showing 1–3 of 3 reports