Advisories · Technology

PublishPress Capabilities.

Every CVE that names PublishPress Capabilities among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-48197 CVE record

CVSS 7.2 High

WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
- PublishPress Capabilities
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-94487 CVE record

CVSS 8.1 High

WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability
- PublishPress Capabilities
- Cross-site request forgery (CSRF)
Not analysed yet 23 Sept 2026
CVE-2026-28183 CVE record

CVSS 7.2 High

WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
- PublishPress Capabilities
- Privilege escalation
Not analysed yet 6 Aug 2026
CVE-2026-32394 CVE record

CVSS 4.3 Medium

WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability
- PublishPress Capabilities
- Broken access control
Not analysed yet 13 Mar 2026