Skip to contentPublishpress Authors vulnerabilities
- publishpress co-authors, multiple authors and guest authors in an author box with publishpress authorsCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author…CVE-2026-1115926.4 Medium
- publishpress authorsWordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1156106.5 Medium
- publishpress co-authors, multiple authors and guest authors in an author box with publishpress authorsCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix'…CVE-2026-856575.4 Medium
- publishpress authorsWordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerabilityCVE-2026-253097.5 High
- publishpress authorsWordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerabilityCVE-2026-253304.3 Medium
- publishpress authorsWordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion VulnerabilityCVE-2025-474967.5 High
- publishpress authorsWordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerabilityCVE-2025-268867.6 High
- publishpress authors, co-authors, multiple authors and guest authors in an author box with publishpress authors +1 moreCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account…CVE-2024-92158.8 High