Description
Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PublishPress | PublishPress Permissions | ≤ 4.8.3 | — |
Medium · 5.3
CVE-2026-84771
EUVD-2026-69939GHSA-8vw4-g5qf-pj2p
WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by Patchstack