What’s Vulnerable › Products

PublishPress Series vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your PublishPress Series version is affected

Latest PublishPress Series vulnerabilities

• CVE-2026-39444 — WordPress PublishPress Series plugin <= 3.1.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4)
• CVE-2026-74005 — WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
• CVE-2026-66630 — WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2026-66617 — WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-27365 — WordPress PublishPress Series plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)