Approved changes feed: RSS · Atom

cpe:2.3:a:publishpress:publishpress_authors:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPublishpress (a1f39896-cd62-5150-ad54-4c4eea4abcee)
ProductPublishpress Authors (0c0332fc-9cc9-5fcd-acbc-114ab6f36b68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25330 vulnerable 2026-06-08 07:53:19.653805 WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Authors: from n/a through <= 4.10.1.
Published: 2026-02-19T08:26:56.890Z
Updated: 2026-04-28T16:14:55.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25309 vulnerable 2026-06-08 07:53:19.624727 WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Authors: from n/a through <= 4.10.1.
Published: 2026-03-25T16:14:39.628Z
Updated: 2026-04-28T16:14:54.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47496 vulnerable 2026-06-08 07:27:14.471922 WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress PublishPress Authors publishpress-authors allows PHP Local File Inclusion.This issue affects PublishPress Authors: from n/a through <= 4.7.5.
Published: 2025-05-07T14:19:54.712Z
Updated: 2026-04-28T16:12:42.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26886 vulnerable 2026-06-08 07:14:50.618721 WordPress PublishPress Authors plugin <= 4.7.3 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Authors publishpress-authors allows SQL Injection.This issue affects PublishPress Authors: from n/a through <= 4.7.3.
Published: 2025-03-15T21:57:01.998Z
Updated: 2026-04-28T16:11:42.146Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.