Vulnerabilities in publishpress

28 results
Vexday analysis

PublishPress apresenta 8 vulnerabilidades conhecidas, todas com severidade moderada ou menor, sem exploração ativa registrada. A fraqueza dominante é controle de acesso inadequado (CWE-862), padrão em softwares de gerenciamento de conteúdo, com apenas 1 CVE publicado nos últimos 90 dias indicando ritmo lento de descobertas recentes.

CVE-2026-66617MEDIUMWordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25330MEDIUMWordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-69361MEDIUMWordPress Post Expirator plugin <= 4.9.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-13149MEDIUMSchedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status ModificationEPSS 0.2%CVE-2025-49032MEDIUMWordPress Gutenberg Blocks plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-74005MEDIUMWordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-94487HIGHWordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-25322MEDIUMWordPress PublishPress Revisions plugin <= 3.7.22 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%