Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

publishpress vulnerabilities

33 published CVEs name publishpress among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-120851

    WordPress PublishPress Revisions plugin <= 4.2.0 - Broken Access Control vulnerability

    PublishPress · PublishPress Revisions

    Medium4.3
  • CVE-2026-111592

    Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name

    publishpress · Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

    Medium6.4
  • CVE-2026-115610

    WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

    PublishPress · PublishPress Authors

    Medium6.5
  • CVE-2026-48197

    WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability

    PublishPress · PublishPress Capabilities

    High7.2
  • CVE-2026-39444

    WordPress PublishPress Series plugin <= 3.1.3 - Insecure Direct Object References (IDOR) vulnerability

    PublishPress · PublishPress Series

    Medium5.4
  • CVE-2026-94487

    WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability

    PublishPress · PublishPress Capabilities

    High8.1
  • CVE-2026-74005

    WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability

    PublishPress · PublishPress Series

    Medium5.4
  • CVE-2026-66630

    WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability

    PublishPress · PublishPress Series

    High7.6
  • CVE-2026-66617

    WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

    PublishPress · PublishPress Series

    Medium6.5
  • CVE-2026-85657

    Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' Parameter

    publishpress · Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

    Medium5.4
All 33 in the list