Publishpress Publishpress Series
5 CVEs affecting Publishpress Publishpress Series. Latest disclosed: 2026-10-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66630 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in PublishPress Series <= 3.1.3 versions. |
CVE-2026-66617 | Medium | 6.5 | 2026-09-17 | Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions. |
CVE-2026-27365 | Medium | 5.9 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This… |
CVE-2026-39444 | Medium | 5.4 | 2026-10-02 | Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Acc… |
CVE-2026-74005 | Medium | 5.4 | 2026-09-17 | Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions. |