PressForward

PressForward has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Server-Side Request Forgery (SSRF).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. PressForward is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all PressForward vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-28987

PressForward <= 5.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery

Read the full analysis

Vulnerability Records

3 records
PressForward banner
Latestv5.9.5

PressForward

PressForward

Author

PressForward

4.6(11)
92/100
Last Updated
2025-12-22 (9mo ago)
Active Installs
100+
Downloads
53,563
Requires WP
5.7+
Requires PHP
7.3+
Tested up to
WP 6.9.7
Created
2014-05-30 (13y ago)

PressForward is a free plugin that provides an editorial workflow for content aggregation and curation within the WordPress dashboard. It is designed for bloggers and editorial teams who wish to collect, discuss, and share content from a variety of sources on the open web. PressForward helps you: Collect content from the web via a feed reader and a bookmarklet Discuss content through a collaborative editing interface Share content using best practices for attribution and citation Collect Aggregate content using RSS/Atom feeds Capture any web content with a bookmarklet Import full text, image, video content, and post metadata Batch add feeds using OPML files Integrate standardized content with Readability Discuss Discuss content internally with private commenting Count nominations from teams of contributors and editors Expose item metadata, including the name of the source and method of nomination Share Allow contributors to send items directly to their own Twitter account Attach full content, attribution link, canonical URL, and metadata to WordPress Posts as Draft Republish any content type supported by your theme (text, image, quote, snippet, etc.) Optional auto-redirect back to original source Export an RSS feed that combines all content from site’s feed list Instructions for use are found in our User Manual. See how we compare to other WordPress plugins. The PressForward Plugin has been developed and maintained by Digital Scholar since 2019. Boone B. Gorges is the lead developer. The plugin was originally developed by the Roy Rosenzweig Center for History and New Media at George Mason University as part of the PressForward Project, generously funded by the Alfred P. Sloan Foundation. Previous developers include Aram Zucker-Scharff, and Jeremy Boggs. PressForward is free to use and modify under a GNU GPL3 license. Detailed information about our code can be found on our GitHub Wiki.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C