publishpress_revisions_duplicate_posts_submit_approve_and_schedule_content_changes vulnerabilities
CVEs whose affected-version data names the publishpress_revisions_duplicate_posts_submit_approve_and_schedule_content_changes package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-118186Medium· 4.9PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision Workflow
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not correctly restrict who may publish content, allowing users such as Contributors who can edit but not publish…
CVE-2026-118187Low· 2.7PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDOR
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user requesting to duplicate or revise a post has access to that specific post, only that they…
CVE-2026-118188Medium· 4.3PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosure
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user is permitted to read a given post before returning its content through its revision-compa…