CVE-2026-84771

Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.

Published Sep 2, 2026
CVSS 5.3 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

PublishPress Permissions

CVE-2026-84771 at the National Vulnerability Database