organize-series vulnerabilities
CVEs whose affected-version data names the organize-series package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-74005Medium· 5.4Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Series <= 3.1.3 versions.
▾ SunlitPublishPress · organize-seriesEPSS 0.10%via NVD
CVE-2026-66630High· 7.6Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.
Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.
▾ TwilightPublishPress · organize-seriesEPSS 0.28%via NVD
CVE-2026-66617Medium· 6.5Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.
Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.
▾ SunlitPublishPress · organize-seriesEPSS 0.16%via NVD