CVE-2026-28183: WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability

Published Aug 6, 2026

Updated

Editor Privilege Escalation in PublishPress Capabilities <= 2.45.0 versions.

Affected Software

1 affected component

PublishPress Capabilities<=2.45.0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress PublishPress Capabilities plugin to a version that resolves this vulnerability.
Fixed in 2.50.0

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-28183 has a severity rating of high, classified as 7.2.

CVE-2026-28183 is a privilege escalation vulnerability affecting the PublishPress Capabilities plugin.

To fix CVE-2026-28183, update the PublishPress Capabilities plugin to version 2.45.1 or later.

CVE-2026-28183 affects all versions of the PublishPress Capabilities plugin up to and including 2.45.0.

Users with the PublishPress Capabilities plugin installed on their WordPress sites are at risk from CVE-2026-28183.