Yandaozi Ppress — known CVE vulnerabilities

Every CVE whose affected-product data names Yandaozi Ppress, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-52159 — CVSS 8.8 (high): Hardcoded credentials in default configuration of PPress 0.0.9.
• CVE-2025-54815 — CVSS 8.8 (high): Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.
• CVE-2025-54761 — CVSS 8.0 (high): An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.
• CVE-2025-25973 — CVSS 6.5 (medium): A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute…