Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66630 2 Publishpress, Wordpress 2 Publishpress Series, Wordpress 2026-09-17 7.6 High
Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.
CVE-2026-74005 2 Publishpress, Wordpress 2 Publishpress Series, Wordpress 2026-09-17 5.4 Medium
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions.
CVE-2026-66617 2 Publishpress, Wordpress 2 Publishpress Series, Wordpress 2026-09-17 6.5 Medium
Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.
CVE-2026-27365 2 Publishpress, Wordpress 2 Publishpress Series, Wordpress 2026-08-21 5.9 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This issue affects PublishPress Series: from n/a through 2.17.0.