Publishpress Publishpress Capabilities
3 CVEs affecting Publishpress Publishpress Capabilities. Latest disclosed: 2026-09-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94487 | High | 8.1 | 2026-09-23 | Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions. |
CVE-2026-28183 | High | 7.2 | 2026-08-06 | Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affec… |
CVE-2026-32394 | Medium | 4.3 | 2026-03-13 | Missing Authorization vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Exploiting Incorrectly Configured Access Contr… |