pubjet vulnerabilities

Products

• Pubjet | پاب‌جت 2

Latest pubjet CVEs

Newest publication first

1. CVE-2026-103479 Pubjet | پاب‌جت <= 5.4.8 - Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action

   Published 2026-11-06

   High·CVSS 7.6 EPSS 0.38%

   The Pubjet | پاب‌جت plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.4.8. This is due to the checkToken() AJAX handler — registered under wp_ajax_pubjet-check-token — performing no capability check and no nonce verification before...

2. CVE-2026-40802 WordPress Pubjet | پاب‌جت plugin <= 5.4.8 - Settings Change vulnerability

   Published 2026-10-10

   High·CVSS 7.6 EPSS 0.29%

   Missing Authorization vulnerability in pubjet Pubjet | پاب‌جت pubjet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pubjet | پاب‌جت: from n/a through 5.4.8.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.