← WordPress Vulnerabilities
WordPress security by component

Publish 2 Ping.fm

Publish 2 Ping.fm publishes WordPress posts to the Ping.fm social publishing service.

Publish 2 Ping.fm (publish-2-pingfm) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published May 05, 2026; the highest published CVSS base score is 6.1.

Plugin slug: publish-2-pingfm

CVE-2026-6702: Publish 2 Ping.fm: Cross-site request forgery

Publish 2 Ping.fm is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 1.1.

PublishedMay 05, 2026
Safe version guidanceSee mitigation notes
Published vulnerabilities for publish-2-pingfm
Safe version
May 05, 2026 CVE-2026-6702
Publish 2 Ping.fm: Cross-site request forgery
Publish 2 Ping.fm is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 1.1.
See mitigation notes
CVE6.1
NVDPending