CVE-2026-118186
PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision Workflow
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not correctly restrict who may publish content, allowing users such as Contributors who can edit but not publish to make unreviewed posts and pages publicly live, bypassing the intended editorial approval workflow.
| Vendor | unknown |
| Product | publishpress revisions: duplicate posts, submit, approve and schedule content changes |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown publishpress revisions: duplicate posts, submit, approve and schedule content changes
Be the first to know when new unknown vulnerabilities affecting unknown publishpress revisions: duplicate posts, submit, approve and schedule content changes are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
3.6.0 < 4.3.1
References
Credits
trangdld WPScan