CVE-2026-27365

The PublishPress Series plugin is vulnerable to a stored cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow an attacker to inject malicious scripts that execute in the context of a user's browser, potentially compromising user data and session integrity. Organizations using affected versions of the plugin should prioritize remediation to protect against potential exploitation.