IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de publishpress (CVE)

Registros CVE publicados para publishpress, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

PublishPress Series 5PublishPress Authors 5Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories 4Gutenberg Blocks 4PublishPress Capabilities 4PublishPress Revisions 3Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors 3PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 2Post Expirator 2PublishPress Permissions 1authors 1User Role Editor – PublishPress Capabilities: Access Control and User Roles 1PublishPress Blocks – Block Controls, Block Visibility, Block Permissions 1
35 resultados
6.4Media
CVE-2026-111592

Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name

publishpress Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name (maps to display_name)' parameter in all versions up to, and including, 4.17.0 due to…

5.4Media
CVE-2026-85657

Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' Parameter

publishpress Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘profile_fields_user_email_value_prefix’ parameter in all versions up to, and including, 4.…

7.2Alta
CVE-2026-75927

PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant

publishpress User Role Editor – PublishPress Capabilities: Access Control and User Roles

The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.50.0. This is due to the `addPluginCapabilities()` function…

5.5Media
CVE-2026-5247

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute

publishpress Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories

The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper' attribute of the [futureaction] shortcode in all versions up to, and including, 4.10.0. This is due to insufficient input sa…

5.4Media
CVE-2025-14718

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.3 - Missing Authorization to Authenticated (Contributor+) Workflow Manipulation

publishpress Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories

The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This ma…