All 5 CVE vulnerabilities found in PublishPress Series, with AI-generated Chinese analysis, references, and POCs.
Vendor: PublishPress
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-39444 | WordPress PublishPress Series plugin <= 3.1.3 - Insecure Direct Object References (IDOR) vulnerability CWE-639 | 5.4 | Medium | 2026-10-02 |
| CVE-2026-74005 | WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 | 5.4 | Medium | 2026-09-17 |
| CVE-2026-66630 | WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability CWE-89 | 7.6 | High | 2026-09-17 |
| CVE-2026-66617 | WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2026-09-17 |
| CVE-2026-27365 | WordPress PublishPress Series plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability CWE-79 | 5.9 | Medium | 2026-08-18 |
All 5 known CVE vulnerabilities affecting PublishPress Series with full Chinese analysis, references, and POCs where available.