Advisories · Technology

PublishPress Authors.

Every CVE that names PublishPress Authors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115610 CVE record

CVSS 6.5 Medium

WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
- PublishPress Authors
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-25309 CVE record

CVSS 7.5 High

WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability
- PublishPress Authors
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-25330 CVE record

CVSS 4.3 Medium

WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability
- PublishPress Authors
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-47496 CVE record

CVSS 7.5 High

WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability
- PublishPress Authors
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-26886 CVE record

CVSS 7.6 High

WordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability
- PublishPress Authors
- SQL injection
Not analysed yet 15 Mar 2025