Advisories · Technology

PublishPress Series.

Every CVE that names PublishPress Series among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39444 CVE record

CVSS 5.4 Medium

WordPress PublishPress Series plugin <= 3.1.3 - Insecure Direct Object References (IDOR) vulnerability
- PublishPress Series
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2026-74005 CVE record

CVSS 5.4 Medium

WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability
- PublishPress Series
- Cross-site request forgery (CSRF)
Not analysed yet 17 Sept 2026
CVE-2026-66630 CVE record

CVSS 7.6 High

WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability
- PublishPress Series
- SQL injection
Not analysed yet 17 Sept 2026
CVE-2026-66617 CVE record

CVSS 6.5 Medium

WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
- PublishPress Series
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2026
CVE-2026-27365 CVE record

CVSS 5.9 Medium

WordPress PublishPress Series plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability
- PublishPress Series
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2026