Vulnerabilities

TI-2025-39095 CVE-2025-62947 · GHSA-4x6p-59v2-q4rm

WordPress Publitio plugin <= 2.2.5 - Sensitive Data Exposure vulnerability

LOW 28

Insertion of Sensitive Information Into Sent Data vulnerability in publitio Publitio publitio allows Retrieve Embedded Sensitive Data.This issue affects Publitio: from n/a through <= 2.2.5.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00265 Published 2025-10-27 No fix listed CWE-201

TI-2025-36606 CVE-2025-58962 · GHSA-cj43-p7q8-248c

WordPress Publitio Plugin <= 2.2.1 - Server Side Request Forgery (SSRF) Vulnerability

LOW 28

Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio publitio allows Server Side Request Forgery.This issue affects Publitio: from n/a through <= 2.2.1.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00218 Published 2025-09-22 No fix listed CWE-918

TI-2025-22937 CVE-2025-31800 · GHSA-2x9r-wrw3-xf8x

WordPress Publitio plugin <= 2.2.0 - Arbitrary File Read vulnerability

LOW 30

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in publitio Publitio publitio allows Path Traversal.This issue affects Publitio: from n/a through <= 2.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00561 Published 2025-04-03 No fix listed CWE-22

TI-2025-22936 CVE-2025-31799 · GHSA-h54m-8jjr-7jf8

WordPress Publitio plugin <= 2.1.8 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through <= 2.1.8.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00403 Published 2025-04-01 No fix listed CWE-862

TI-2025-22935 CVE-2025-31798 · GHSA-g79q-4pjf-cmvv

WordPress Publitio Plugin <= 2.1.8 - Broken Access Control vulnerability