Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118186— PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision Workflow

Quick assessment

Affected
Unknown PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在版本 4.3.1 之前的 PublishPress Revisions（用于 WordPress 的“重复发布、提交、审批和排期内容变更”插件）未能正确限制可发布内容的用户权限，导致本应仅能编辑而无法发布的用户（例如“贡献者”角色）能够绕过预期的编辑审批流程，将未经审核的文章和页面直接公开发布。

AI Predicted 6.5 Difficulty: Trivial

Possible ATT&CK Techniques 1 AI

T1548.001 · Setuid and Setgid
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118186

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision Workflow
Source: CVE Program / CVE List V5
Vulnerability Description
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not correctly restrict who may publish content, allowing users such as Contributors who can edit but not publish to make unreviewed posts and pages publicly live, bypassing the intended editorial approval workflow.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3.6.0 ~ 4.3.1 -

II. Public POCs for CVE-2026-118186

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118186

请登录查看更多情报信息。

Other References for CVE-2026-118186 (1)

Same Patch Batch · Unknown · 2026-11-06 · 30 CVEs total

CVE-2026-118423 10.0 CRITICAL WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
CVE-2026-88800 9.1 CRITICAL MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Rol
CVE-2026-88799 8.8 HIGH MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover
CVE-2026-88801 8.0 HIGH MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Ro
CVE-2026-121633 5.3 MEDIUM Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Liste
CVE-2026-121636 5.3 MEDIUM Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the
CVE-2026-118166 4.8 MEDIUM MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution vi
CVE-2026-113615 GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi
CVE-2026-118239 AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth
CVE-2026-118188 PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosure
CVE-2026-115673 Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email
CVE-2026-118167 MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override
CVE-2026-118187 PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDOR
CVE-2026-86606 iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser
CVE-2026-110813 Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Nam
CVE-2026-110525 MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent
CVE-2026-92396 Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css
CVE-2026-12967 WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass
CVE-2026-87784 Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission
CVE-2026-119259 All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write

Showing top 20 of 30 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
Same vendor: Unknown