CyberSecBulletin

Pubjet vulnerabilities

We track 2 vulnerabilities in Pubjet products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score

Latest Pubjet vulnerabilities

  • 7.6 High severity

    Pubjet | پاب‌جت: Improper Privilege Management

    CVE-2026-103479Pubjet

    The Pubjet | پاب‌جت plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.4.8. This is due to the `checkToken()` AJAX handler — registered under `wp_ajax_pubjet-check-token` — performing no capability check and no n

  • 7.6 High severity

    Pubjet | پاب‌جت: Missing Authorization

    CVE-2026-40802Pubjet

    Missing Authorization vulnerability in pubjet Pubjet | پاب‌جت pubjet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pubjet | پاب‌جت: from n/a through 5.4.8.