PublishPress Capabilities vulnerabilities | LiveThreat CVE Feed

Product

PublishPress Capabilities

by PublishPress · last CVE Oct 6, 2026

CVEs

On KEV

8.1

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 1Low 0

Severity

Exploitation

Watch

Add PublishPress Capabilities to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-94487	8.1	0%	Sep 23	WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 2.50.1
CVE-2026-48197	7.2	0%	Oct 6	WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability Affected: through 2.45.0
CVE-2026-28183	7.2	0%	Aug 6	WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability Affected: through 2.45.0
CVE-2026-32394	4.3	0%	Mar 13	WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability Affected: through 2.31.0