Advisories · Technology

ontraport PilotPress.

Every CVE that names ontraport PilotPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85659 CVE record

CVSS 8.8 High

PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter
- ontraport PilotPress
- Privilege escalation
Not analysed yet 16 Oct 2026
CVE-2025-58221 CVE record

CVSS 4.3 Medium

WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability
- ONTRAPORT PilotPress
- Broken access control
Not analysed yet 22 Sept 2025
CVE-2025-58238 CVE record

CVSS 6.5 Medium

WordPress PilotPress Plugin <= 2.0.36 - Cross Site Scripting (XSS) Vulnerability
- ONTRAPORT PilotPress
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025