CVE-2026-48197

7.2 HIGH

Published 2026-10-06 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-266

All references

https://patchstack.com/database/wordpress/plugin/capability-manager-enhanced/vulnerability/wordpress-publishpress-capabilities-plugin-2-45-0-privilege-escalation-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2026-10059
HIGHCVE-2026-100619PoC
MEDIUMCVE-2026-100883PoC
HIGHCVE-2026-101053PoC
MEDIUMCVE-2026-101054PoC
MEDIUMCVE-2026-101144
HIGHCVE-2026-101860PoC
HIGHCVE-2026-102129PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.