VYPR

PublishPress Series

by WordPress

CVEs (5)

  • CVE-2026-66630HigSep 17, 2026
    risk 0.49cvss 7.6epss 0.00

    Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.

  • CVE-2026-66617MedSep 17, 2026
    risk 0.42cvss 6.5epss 0.00

    Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.

  • CVE-2026-27365MedAug 18, 2026
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This issue affects PublishPress Series: from n/a through 2.17.0.

  • CVE-2026-39444MedOct 2, 2026
    risk 0.35cvss 5.4epss —

    Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Series: from n/a through 3.1.3.

  • CVE-2026-74005MedSep 17, 2026
    risk 0.35cvss 5.4epss 0.00

    Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions.