TreePress – Easy Family Trees & Ancestor Profiles

TreePress – Easy Family Trees & Ancestor Profiles has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.3 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Missing Authorization.

Every one of the 4 issues recorded for TreePress – Easy Family Trees & Ancestor Profiles has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all TreePress – Easy Family Trees & Ancestor Profiles vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.3CVE-2022-4974

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Read the full analysis

Vulnerability Records

4 records


2026-04-30 17:17	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter TreePress <= 3.0.6	`CVE-2024-13362`	6.1 Medium	Asaf Mozes	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get TreePress 1.0 – 3.0.0.1	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2023-03-20 00:00	TreePress – Easy Family Trees & Ancestor Profiles <= 2.0.22 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'post_title' parameter TreePress <= 2.0.22	`CVE-2023-23863`	4.4 Medium	yuyudhn	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks TreePress < 2.0.21	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–4 of 4 reports