Publishpress Capabilities vulnerabilities

• publishpress capabilities WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability CVE-2026-48197 7.2 HighOctober 6, 2026
• publishpress capabilities WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-94487 8.1 HighSeptember 23, 2026
• publishpress user role editor – publishpress capabilities: access control and user roles PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant CVE-2026-75927 7.2 HighSeptember 9, 2026
• publishpress capabilities WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability CVE-2026-28183 7.2 HighAugust 6, 2026
• publishpress capabilities WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability CVE-2026-32394 4.3 MediumMarch 13, 2026
• publishpress capabilities, unknown publishpress capabilities pro, publishpress capabilities – user role access, editor permissions, admin menus +2 more PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection CVE-2022-3366 7.2 HighOctober 31, 2022
• publishpress capabilities, unknown publishpress capabilities pro, publishpress capabilities – user role access, editor permissions, admin menus +2 more PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise CVE-2021-25032 Public exploit 9.8 CriticalJanuary 10, 2022