CVE-2026-84771: Publishpress Permissions

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.

Affected products

• Publishpress Publishpress Permissions: up to and including 4.8.3

Published 2026-09-02. Last modified 2026-09-02.