{"id":15354,"date":"2021-12-10T11:14:50","date_gmt":"2021-12-10T11:14:50","guid":{"rendered":"https:\/\/newblog.siteground.com\/en\/?p=15354"},"modified":"2025-09-18T14:48:49","modified_gmt":"2025-09-18T14:48:49","slug":"publishpress-capabilities-security-vulnerability","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/publishpress-capabilities-security-vulnerability\/","title":{"rendered":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability"},"content":{"rendered":"\n<p>A couple of days ago a serious security issue with the <a rel=\"noreferrer noopener\" href=\"https:\/\/wordpress.org\/support\/topic\/recent-security-issue-2\/\" data-type=\"URL\" data-id=\"https:\/\/wordpress.org\/support\/topic\/recent-security-issue-2\/\" target=\"_blank\">PublishPress Capabilities plugin<\/a> was discovered. Usually, we always try to protect our customers using our powerful WAF (Web Application Firewall) system and build rules to stop hacking attempts while leaving the update itself to the client&#8217;s preferences. <\/p>\n\n\n\n<p>However,&nbsp;due to the nature of the exploit, we couldn\u2019t protect our clients&#8217; sites with WAF rules so, we decided to perform an emergency update on all our active installations of the plugin. Although, we do not expect any problems associated with this update (even the default WordPress system <a rel=\"noreferrer noopener\" href=\"https:\/\/wordpress.org\/support\/topic\/please-update-if-using-versions-2-0-to-2-3\/\" target=\"_blank\">issued an update<\/a>), if you notice something not working properly, feel free to contact the <a rel=\"noreferrer noopener\" href=\"https:\/\/wordpress.org\/support\/plugin\/capability-manager-enhanced\/\" target=\"_blank\">PublishPress Support<\/a> for additional assistance!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who&#8217;s Affected?<\/h2>\n\n\n\n<p>Only plugin versions between 2.0.0 and 2.3.0 are affected by this vulnerability. That&#8217;s why our team has performed the update only on them in order to avoid any problems with the plugin&#8217;s normal operation.<\/p>\n\n\n\n<div class=\"post-page__colored-blocks post-page__colored-blocks--update\"><h3 class=\"title title--regular title--size-medium title--weight-bold color-darkest\">UPDATE<\/h3><p class=\"text text--size-medium color-darkest\"><a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/wordpress.org\/support\/topic\/recent-security-issue-2\/\">PublishPress Capabilities plugin<\/a>&nbsp;has been successfully updated on our servers. As the vulnerability was&nbsp;reported to affect a <a rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.wordfence.com\/blog\/2021\/12\/massive-wordpress-attack-campaign\/\">few other plugins and themes<\/a>&nbsp;we have gone deeper with the investigation of the issues and have managed to create a WAF rule that is protecting against possible exploits of this particular vulnerability.<\/p><\/div>\n\n\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers using our powerful WAF (Web Application Firewall) system and build rules to stop hacking attempts while leaving the update itself to the client's preferences. However,&nbsp;due to the nature of the exploit,&hellip;","protected":false},"author":3,"featured_media":15362,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,12,15],"tags":[],"class_list":["post-15354","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-insights","category-security","category-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>PublishPress Capabilities Forced Update due to Serious Security Vulnerability : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PublishPress Capabilities Forced Update due to Serious Security Vulnerability\" \/>\n<meta property=\"og:description\" content=\"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-10T11:14:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:48:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/fb-1200x630-1.png\" \/>\n<meta name=\"author\" content=\"Hristo Pandjarov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"PublishPress Capabilities Forced Update due to Serious Security Vulnerability\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hristo Pandjarov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\"},\"author\":{\"name\":\"Hristo Pandjarov\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\"},\"headline\":\"PublishPress Capabilities Forced Update due to Serious Security Vulnerability\",\"datePublished\":\"2021-12-10T11:14:50+00:00\",\"dateModified\":\"2025-09-18T14:48:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\"},\"wordCount\":219,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg\",\"articleSection\":[\"Hosting Insights\",\"Security\",\"WordPress\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\",\"name\":\"PublishPress Capabilities Forced Update due to Serious Security Vulnerability : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg\",\"datePublished\":\"2021-12-10T11:14:50+00:00\",\"dateModified\":\"2025-09-18T14:48:49+00:00\",\"description\":\"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PublishPress Capabilities Forced Update due to Serious Security Vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\",\"name\":\"Hristo Pandjarov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"caption\":\"Hristo Pandjarov\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/hristo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability : SiteGround Blog","description":"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability","og_description":"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers","og_url":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2021-12-10T11:14:50+00:00","article_modified_time":"2025-09-18T14:48:49+00:00","og_image":[{"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/fb-1200x630-1.png","type":"","width":"","height":""}],"author":"Hristo Pandjarov","twitter_card":"summary_large_image","twitter_title":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Hristo Pandjarov","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/"},"author":{"name":"Hristo Pandjarov","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390"},"headline":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability","datePublished":"2021-12-10T11:14:50+00:00","dateModified":"2025-09-18T14:48:49+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/"},"wordCount":219,"commentCount":0,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg","articleSection":["Hosting Insights","Security","WordPress"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/","url":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/","name":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg","datePublished":"2021-12-10T11:14:50+00:00","dateModified":"2025-09-18T14:48:49+00:00","description":"A couple of days ago a serious security issue with the PublishPress Capabilities plugin was discovered. Usually, we always try to protect our customers","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/12\/blog-post-1200x600-1.jpg","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/publishpress-capabilities-security-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"PublishPress Capabilities Forced Update due to Serious Security Vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390","name":"Hristo Pandjarov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","caption":"Hristo Pandjarov"},"sameAs":["https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/hristo\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=15354"}],"version-history":[{"count":9,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15354\/revisions"}],"predecessor-version":[{"id":19862,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15354\/revisions\/19862"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media\/15362"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=15354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=15354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=15354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}