CVE-2021-45808: Jpress

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

Affected products

• Jpress Jpress: version 4.2.0 only

Published 2022-01-19. Last modified 2026-07-09.