FoxyPress

FoxyPress has 6 disclosed vulnerabilities in the WordSec catalog, all reported in 2012; 4 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 3 high. 2012 was the busiest year with 6 disclosures.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (33%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

4 of the records (67%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2012.

2 independent researchers contributed these findings, most of them (5) reported by Janek Vind.

Strategic Overview

Avg CVSSHigh

7.8/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all FoxyPress vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8

FoxyPress <= 0.4.9 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

6 records


2012-10-30 00:00	FoxyPress <= 0.4.9 - Cross-Site Request Forgery FoxyPress <= 0.4.9	`N/A`	8.8 High	Janek Vind	No
2012-10-30 00:00	FoxyPress <= 0.4.9 - SQL Injection FoxyPress <= 0.4.9	`N/A`	8.8 High	Janek Vind	No
2012-10-30 00:00	FoxyPress <= 0.4.2.6 - Cross-Site Scripting FoxyPress <= 0.4.2.6	`N/A`	6.1 Medium	Janek Vind	Yes
2012-10-30 00:00	FoxyPress <= 0.4.2.7 - Open Redirect FoxyPress <= 0.4.2.7	`N/A`	6.1 Medium	Janek Vind	Yes
2012-10-30 00:00	FoxyPress < 0.4.2.6 - Arbitrary File Upload FoxyPress <= 0.4.2.5	`N/A`	7.2 High	Janek Vind	Yes
2012-06-12 00:00	FoxyPress <= 0.4.2.1 - Arbitrary File Upload FoxyPress < 0.4.2.2	`CVE-2012-10020`	9.8 Critical	Sammy Forgit	Yes

Showing 1–6 of 6 reports