Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 14
   CVE NVD 24h ago

   The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site…

   The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name (maps to display_name)' parameter in all versions up…

   CVSS 6.4 CVE-2026-111592 Publishpress Web platform
2. 9
   CVE NVD 2d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Authors…

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Authors publishpress-authors allows Stored XSS.This issue affects PublishPress Authors: from n/a…

   CVSS 6.5 CVE-2026-115610 PublishPress

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Publishpress&limit=100. RSS for this section: feed.xml.