GigPress

GigPress has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2024; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2015 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (50%). Other recurring categories include SQL Injection.

5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

5 independent researchers contributed these findings, most of them (2) reported by Marcin Probola.

Strategic Overview

Avg CVSSMedium

7.0/ 10

Patch Coverage83%

Open

Fixed

Get automatic notifications for all GigPress vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2023-7233

GigPress <= 2.3.29 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records


2024-01-19 00:00	GigPress <= 2.3.29 - Authenticated (Admin+) Stored Cross-Site Scripting GigPress <= 2.3.29	`CVE-2023-7233`	4.4 Medium	Bob Matyas	No
2023-02-06 00:00	GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection GigPress <= 2.3.28	`CVE-2023-0381`	8.8 High	Erwan LR	Yes
2023-01-04 00:00	GigPress <= 2.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode GigPress <= 2.3.27	`CVE-2022-4759`	6.4 Medium	István Márton	Yes
2015-08-24 00:00	GigPress <= 2.3.10 - SQL Injection GigPress < 2.3.11	`CVE-2015-9353`	7.2 High	Marcin Probola	Yes
2015-08-24 00:00	GigPress <= 2.3.10 - Reflected Cross-Site Scripting GigPress <= 2.3.10	`CVE-2015-9354`	6.1 Medium	Marcin Probola	Yes
2015-05-26 00:00	GigPress <= 2.3.8 - SQL Injection GigPress < 2.3.9	`CVE-2015-4066`	8.8 High	Adrián M. F.	Yes

Showing 1–6 of 6 reports