Publishpress Authors vulnerabilities

• publishpress co-authors, multiple authors and guest authors in an author box with publishpress authors Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author… CVE-2026-111592 6.4 MediumOctober 31, 2026
• publishpress authors WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-115610 6.5 MediumOctober 29, 2026
• publishpress co-authors, multiple authors and guest authors in an author box with publishpress authors Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix'… CVE-2026-85657 5.4 MediumSeptember 15, 2026
• publishpress authors WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability CVE-2026-25309 7.5 HighMarch 25, 2026
• publishpress authors WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability CVE-2026-25330 4.3 MediumFebruary 19, 2026
• publishpress authors WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability CVE-2025-47496 7.5 HighMay 7, 2025
• publishpress authors WordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability CVE-2025-26886 7.6 HighMarch 15, 2025
• publishpress authors, co-authors, multiple authors and guest authors in an author box with publishpress authors +1 more Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account… CVE-2024-9215 8.8 HighOctober 17, 2024