Plugin icon

PublishPress Capabilities: User Role Access Control, Admin Area Permissions

capability-manager-enhanced

Vulnerabilities:

9

Last Updated:

October 14, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-09-23
Title
PublishPress Capabilities: User Role Access Control, Admin Area Permissions < 2.51.0 - Cross-Site Request Forgery
Fixed in
Fixed in 2.51.0
CVSS
4.3 (medium)
Published
2026-09-08
Title
PublishPress Capabilities < 2.50.1 - Editor+ Privilege Escalation via Default Capability Grant
Fixed in
Fixed in 2.50.1
CVSS
4.9 (medium)
Published
2026-08-05
Title
PublishPress Capabilities: User Role Access Control, Admin Area Permissions < 2.50.0 - Authenticated (Editor+) Privilege Escalation
Fixed in
Fixed in 2.50.0
CVSS
4.7 (medium)
Published
2026-08-05
Title
PublishPress Capabilities: User Role Access Control, Admin Area Permissions < 2.50.0 - Authenticated (Editor+) Privilege Escalation
Fixed in
Fixed in 2.50.0
CVSS
4.7 (medium)
Published
2026-02-20
Title
PublishPress Capabilities < 2.32.0 - Missing Authorization
Fixed in
Fixed in 2.32.0
CVSS
4.3 (medium)
Published
2022-10-10
Title
PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection
Fixed in
Fixed in 2.5.2
CVSS
5.5 (medium)
Published
2022-01-13
Title
PublishPress Capabilities < 2.3.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.3.3
CVSS
6.1 (medium)
Published
2021-12-08
Title
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
Fixed in
Fixed in 2.3.1
CVSS
10.0 (critical)
Published
2018-09-25
Title
Capability Manager Enhanced <= 1.5.8 - Authenticated SQLi
Fixed in
Fixed in 1.5.9
CVSS
n/a