publishpress vulnerabilities
32 published CVEs name publishpress among the affected products.
- Published CVEs
- 32
- Last 12 months
- 24
- Critical
- 1
- Known exploited
- 0
Critical 1High 10Medium 21Low 0Not scored 0
CVEs per yearBy the year they were published
- 20243
- 20257
- 202622
Newest CVEs
- CVE-2026-111592
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name
publishpress · Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors
Medium6.4 - CVE-2026-115610
WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
PublishPress · PublishPress Authors
Medium6.5 - CVE-2026-48197
WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
PublishPress · PublishPress Capabilities
High7.2 - CVE-2026-39444
WordPress PublishPress Series plugin <= 3.1.3 - Insecure Direct Object References (IDOR) vulnerability
PublishPress · PublishPress Series
Medium5.4 - CVE-2026-94487
WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability
PublishPress · PublishPress Capabilities
High8.1 - CVE-2026-74005
WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability
PublishPress · PublishPress Series
Medium5.4 - CVE-2026-66630
WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability
PublishPress · PublishPress Series
High7.6 - CVE-2026-66617
WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
PublishPress · PublishPress Series
Medium6.5 - CVE-2026-85657
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' Parameter
publishpress · Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors
Medium5.4 - CVE-2026-75927
PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant
publishpress · User Role Editor – PublishPress Capabilities: Access Control and User Roles
High7.2
Products with the most CVEs
- PublishPress Authors5
- PublishPress Series5
- PublishPress Capabilities4
- Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories4
- Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors3
- Gutenberg Blocks2
- Post Expirator2
- PublishPress Revisions2
- PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes2
- PublishPress Blocks – Block Controls, Block Visibility, Block Permissions1