How many CVEs have a located fix in flatpressblog/flatpress?

21 published CVEs have a fix traced to functions in flatpressblog/flatpress, touching 35 functions across 33 files.

Which function in flatpressblog/flatpress has been patched by the most CVEs?

onupload in admin/panels/uploader/admin.uploader.php has been changed by 6 CVE fixes, from 2022 to 2025.

How large is a typical CVE fix in flatpressblog/flatpress?

The median fix changes 6 lines. 62% of fixes change 20 lines or fewer, and 71% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

#249 of 500 repositories

flatpressblog/flatpress

Name: flatpressblog/flatpress: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix June 23, 2026

21

CVE fixes located

Published CVEs

35

Functions patched

Distinct function sites

33

Files patched

Distinct source files

2022–2026

Years covered

By CVE publication date

Overview

21 published CVEs have a fix traced to functions in flatpressblog/flatpress, the earliest published in 2022. Those fixes changed 35 distinct functions across 33 files, in 133 patch hunks.

Among the 500 repositories tracked here, flatpressblog/flatpress ranks #249 by the number of CVEs with a located fix.

Most patched functions

Functions in flatpressblog/flatpress changed by the most CVE fixes.

Most patched files

Files in flatpressblog/flatpress changed by the most CVE fixes.

1admin/panels/uploader/admin.uploader.php6 CVEs · 3 functions
2fp-plugins/mediamanager/panels/panel.mediamanager.file.php4 CVEs · 2 functions
3setup/lib/main.lib.php3 CVEs · 5 functions
4admin/panels/config/admin.config.php2 CVEs · 2 functions
5fp-includes/core/core.wp-pluggable-funcs.php1 CVEs · 5 functions
6fp-includes/core/core.cookie.php1 CVEs · 2 functions
7fp-includes/core/core.session.php1 CVEs · 2 functions
8fp-includes/core/core.users.php1 CVEs · 2 functions
9login.php1 CVEs · 2 functions
10admin/panels/entry/admin.entry.delete.php1 CVEs · 1 functions

Fix size

How much code a CVE fix in flatpressblog/flatpress changes, with backports counted once.

6

Median lines changed

Added plus removed, per CVE

62%

Fixes of 20 lines or fewer

Share of CVE fixes

71%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in flatpressblog/flatpress, and the functions each fix changed.

FlatPress - Stored Cross-Site Scripting via Unescaped Comment and Contact Form Fields
CVE-2026-56785ensure_https_url
High · CVSS 8.4
EPSS 0.4%2026-06-23
CVE-2025-44108
CVE-2025-44108system_hashsalt_save
Medium · CVSS 4.8
EPSS 0.3%2025-05-19
Stored XSS in flatpressblog/flatpress
CVE-2024-4023onupload
High · CVSS 8.1
EPSS 0.8%2025-03-20
CVE-2024-9699
CVE-2024-9699onupload sanitize_filename admin_uploader
Medium · CVSS 5.4
EPSS 0.4%2025-03-20
CVE-2024-9847
CVE-2024-9847admin_static_delete admin_entry_delete
High · CVSS 8.0
EPSS 0.3%2025-03-20
CVE-2024-25411
CVE-2024-25411validate getstep print_err
Medium · CVSS 6.1
EPSS 0.9%2024-09-27
CVE-2023-1106
CVE-2023-1106validate
Medium · CVSS 6.1
EPSS 0.6%2023-03-02
CVE-2023-1148
CVE-2023-1148admin_config
Medium · CVSS 4.8
EPSS 0.5%2023-03-02
CVE-2023-1107
CVE-2023-1107onsubmit
Medium · CVSS 5.4
EPSS 0.5%2023-03-02
CVE-2023-1147
CVE-2023-1147comment_clean
Medium · CVSS 5.4
EPSS 0.5%2023-03-02
CVE-2023-1146
CVE-2023-1146onsave
Medium · CVSS 5.4
EPSS 0.5%2023-03-02
CVE-2023-1105
CVE-2023-1105doItemActions
High · CVSS 8.1
EPSS 0.7%2023-03-01

Get an alert for each new flatpressblog/flatpress CVE, with the patched functions and AI-written analysis.

Monitor flatpress CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

debian/libvirt21 CVEs debian/libxml221 CVEs ethyca/fides21 CVEs francoisjacquet/rosariosis21 CVEs FreshRSS/FreshRSS21 CVEs huggingface/transformers21 CVEs ILIAS-eLearning/ILIAS21 CVEs instantsoft/icms221 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in flatpressblog/flatpress.

How many CVEs have a located fix in flatpressblog/flatpress?: 21 published CVEs have a fix traced to functions in flatpressblog/flatpress, touching 35 functions across 33 files.
Which function in flatpressblog/flatpress has been patched by the most CVEs?: onupload in admin/panels/uploader/admin.uploader.php has been changed by 6 CVE fixes, from 2022 to 2025.
How large is a typical CVE fix in flatpressblog/flatpress?: The median fix changes 6 lines. 62% of fixes change 20 lines or fewer, and 71% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track flatpressblog/flatpress CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing