PublishPress Authors vulnerabilities

3 known vulnerabilities in PublishPress Authors from PublishPress. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  PublishPress Authors: Missing Authorization

  CVE-2026-25309Mar 25, 2026PublishPress

  Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Authors: from n/a through <= 4.10.1.

• 7.5 High severity

  PublishPress Authors: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-47496May 7, 2025PublishPress

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress PublishPress Authors publishpress-authors allows PHP Local File Inclusion.This issue affects PublishPress Authors: from n/a th

• 7.6 High severity

  PublishPress Authors: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-26886Mar 15, 2025PublishPress

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Authors publishpress-authors allows SQL Injection.This issue affects PublishPress Authors: from n/a through <= 4.7.3.