Kanpress
Kanpress has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Kanpress has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Jieun Kim. Kanpress is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.5.2.
CVE-2025-48356Kanpress <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Kanpress
Author
Isra
Kanpress brings Kanban management methodology to the publishing world. It provides enhanced management for magazines, newspapers and blogs through a workflow where posts move along different states. Total integration · Kanpress manages post creation in your site with your current users and categories. Traceability · Easily visualize when a task was assigned, processed or closed, and by who. Private · Kanpress is used from WordPress desktop and it doesn’t change nothing about aspect or functionallity of your site. Available in English, Español, Galego, Deutsch (thanks J. O. Rüdiger), Italiano (thanks Marco Rossi) and Türk (thanks Enes Ünal) More info on Kanpress homepage.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C