CVE-2026-94487

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in PublishPress Capabilities versions 2.50.1 and earlier, allowing attackers to perform unauthorized actions on behalf of users without their consent. This could lead to significant security breaches, including unauthorized content manipulation or privilege escalation. Organizations using affected versions should prioritize patching this vulnerability to safeguard their systems against potential exploitation.