Simple Folio
PressTigers · 3 CVEs
CVE-2025-14039
MEDIUM
Simple Folio <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fiel…
Jan 28, 2026
CVE-2025-64256
MEDIUM
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Dec 9, 2025
CVE-2025-12151
MEDIUM
Simple Folio <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Nov 27, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-14039 | Simple Folio <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields | MEDIUM | 0.31% | Jan 28, 2026 |
| CVE-2025-64256 | WordPress Simple Folio plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.13% | Dec 9, 2025 |
| CVE-2025-12151 | Simple Folio <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting | MEDIUM | 0.18% | Nov 27, 2025 |
Showing 1 to 3 of 3 CVEs