CVE-2021-45807: Jpress

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.

Affected products

• Jpress Jpress: version 4.2.0 only

Published 2022-01-13. Last modified 2026-07-09.