PublishPress PublishPress Capabilities vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting PublishPress PublishPress Capabilities: 4 record(s), with affected versions and fixes.
CVE-2026-48197
High · 7.2
CWE-266 Oct 6, 2026
WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
CVE-2026-94487
High · 8.1
CWE-352 Sep 23, 2026
WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
CVE-2026-28183
High · 7.2
CWE-266 Aug 6, 2026
WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
CVE-2026-32394
Medium · 4.3
CWE-862 Mar 13, 2026
WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Capabilities: from n/a through <= 2.31.0.