WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Publitio

Publitio plugin integrates Publitio cloud media into WordPress with a simple block for effortless uploading, browsing, and embedding of image, video, …

5Reported vulnerabilities
6.5Highest CVSS score
2.2.6Latest version
300+Active installs

What to do now

Update Publitio to 2.2.2 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: April 23, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-31800 Medium 6.5 0.5% 2.2.1 and earlier 2.2.2 April 3, 2025
CVE-2025-58962 Medium 6.4 0.2% 2.2.1 and earlier 2.2.2 September 22, 2025
CVE-2025-62947 Medium 4.3 0.3% 2.2.3 and earlier — October 10, 2025
CVE-2025-31799 Medium 4.3 0.4% 2.1.8 and earlier 2.1.9 April 1, 2025
CVE-2025-31798 Medium 4.3 0.4% 2.1.8 and earlier 2.1.9 April 1, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.