What’s Vulnerable › Products

PublishPress Capabilities vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your PublishPress Capabilities version is affected

Latest PublishPress Capabilities vulnerabilities

• CVE-2026-48197 — WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability (CVSS 7.2)
• CVE-2026-94487 — WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.1)
• CVE-2026-28183 — WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability (CVSS 7.2)
• CVE-2026-32394 — WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability (CVSS 4.3)