Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118187— PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDOR

Quick assessment

Affected
Unknown PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在版本 4.3.1 之前，WordPress 插件 PublishPress Revisions（用于重复文章、提交、审批和排期内容变更）未验证请求重复或修订某篇文章的用户是否拥有对该特定文章的访问权限，仅检查其是否具备编辑该类文章的权限。这导致拥有“贡献者”及以上权限的用户，能够将其他用户创建的私密、草稿、待审核或已排期的文章，重复为自己拥有的文章，并读取其完整内容。

AI Predicted 5.5 Difficulty: Easy

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118187

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDOR
Source: CVE Program / CVE List V5
Vulnerability Description
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user requesting to duplicate or revise a post has access to that specific post, only that they can edit posts of that type, allowing users with contributor-level access and above to duplicate another user's private, draft, pending or scheduled post into one they own and read its full content.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 0 ~ 4.3.1 -

II. Public POCs for CVE-2026-118187

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118187

请登录查看更多情报信息。

Other References for CVE-2026-118187 (1)

Same Patch Batch · Unknown · 2026-11-06 · 30 CVEs total

CVE-2026-118423 10.0 CRITICAL WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
CVE-2026-88800 9.1 CRITICAL MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Rol
CVE-2026-88799 8.8 HIGH MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover
CVE-2026-88801 8.0 HIGH MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Ro
CVE-2026-121633 5.3 MEDIUM Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Liste
CVE-2026-121636 5.3 MEDIUM Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the
CVE-2026-118166 4.8 MEDIUM MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution vi
CVE-2026-113615 GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi
CVE-2026-118239 AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth
CVE-2026-118188 PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosure
CVE-2026-115673 Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email
CVE-2026-118167 MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override
CVE-2026-118186 PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revi
CVE-2026-86606 iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser
CVE-2026-110813 Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Nam
CVE-2026-110525 MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent
CVE-2026-92396 Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css
CVE-2026-12967 WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass
CVE-2026-87784 Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission
CVE-2026-119259 All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write

Showing top 20 of 30 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
Same vendor: Unknown