Executive brief
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
Junglewise Threat Intelligence
CVE-2026-94487: Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
CVE-2026-94487 · Severity: high · CVSS 8.1 · Published 2026-09-23