OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-48197

HIGH · CVSS 7.2

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

A privilege escalation vulnerability in the PublishPress Capabilities plugin allows unauthorized users to gain elevated permissions, potentially compromising the integrity and security of the affected WordPress sites. This issue impacts all versions up to 2.45.0, and organizations using this plugin should prioritize immediate updates to mitigate the risk of exploitation.

CVE
CVE-2026-48197
Severity
HIGH
CVSS
7.2
EPSS
N/A

Original NVD Description

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.