Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 4.3.1 Clear all filters
TI-2026-85752 CVE-2026-118188 · GHSA-39h7-ggpg-qmm7

Missing access check exposes unpublished posts in PublishPress Revisions

Priority LOW 19

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user is permitted to read a given post before returning its content through i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00176 Published 2026-11-06 Fixed in 4.3.1 CWE-200
TI-2026-85751 CVE-2026-118187 · GHSA-qj79-q7rc-rvm6

IDOR in PublishPress Revisions lets contributors read private posts

Priority LOW 13

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user requesting to duplicate or revise a post has access to that specific pos…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00179 Published 2026-11-06 Fixed in 4.3.1 CWE-639
TI-2026-85750 CVE-2026-118186 · GHSA-87h6-gmv4-qqpq

PublishPress Revisions lets Contributors publish unapproved content

Priority LOW 22

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not correctly restrict who may publish content, allowing users such as Contributors who can edi…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00263 Published 2026-11-06 Fixed in 4.3.1 CWE-863