CVE-2026-74005

Name of the Vulnerable Software and Affected Versions PublishPress Series versions prior to 3.1.4

Description An unauthenticated Cross-Site Request Forgery (CSRF) issue exists in the Issues and Series for Newspapers, Magazines, Publishers, Writers plugin for WordPress. This occurs due to missing or incorrect nonce validation—a security token used to prevent forged requests—within a function. This allows an unauthenticated attacker to perform unauthorized actions by tricking a site administrator into clicking a malicious link.

Recommendations Update to a version newer than 3.1.3.