Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-39444 EUVD-2026-91662GHSA-jffr-vg9w-qc68

WordPress PublishPress Series plugin <= 3.1.3 - Insecure Direct Object References (IDOR) vulnerability

Published Oct 2, 2026 · Updated Oct 2, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Series: from n/a through 3.1.3.

Affected products

VendorProductAffectedFixed
PublishPress PublishPress Series ≤ 3.1.3 —

References