Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118188— PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosure

Quick assessment

Affected
Unknown PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 4.3.1 版本之前，WordPress 插件 PublishPress Revisions（用于重复文章、提交、审批和安排内容变更）在其修订对比功能中，未验证用户是否有权读取指定文章便直接返回其内容。这导致任何已认证用户（包括订阅者）均可读取其他用户的私人、草稿、待审核、已计划或已废弃文章的标题、正文和摘要。

AI Predicted 5.5 Difficulty: Trivial

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118188

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PublishPress Revisions 3.9.0 - 4.2.0 - Subscriber+ Unpublished Content Disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user is permitted to read a given post before returning its content through its revision-comparison feature, allowing any authenticated user, including a Subscriber, to read the title, content and excerpt of any other user's private, draft, pending, scheduled or trashed post.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Unknown PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes 3.9.0 ~ 4.3.1 -

II. Public POCs for CVE-2026-118188

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118188

请登录查看更多情报信息。

Other References for CVE-2026-118188 (1)

Same Patch Batch · Unknown · 2026-11-06 · 30 CVEs total

CVE-2026-118423 10.0 CRITICAL WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload
CVE-2026-88800 9.1 CRITICAL MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Rol
CVE-2026-88799 8.8 HIGH MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover
CVE-2026-88801 8.0 HIGH MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Ro
CVE-2026-121633 5.3 MEDIUM Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Liste
CVE-2026-121636 5.3 MEDIUM Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the
CVE-2026-118166 4.8 MEDIUM MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Arbitrary Shortcode Execution vi
CVE-2026-113615 GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi
CVE-2026-118239 AutomatorWP < 6.0.7 - Unauthenticated Zoom/AWeber Integration Connection Hijack via OAuth
CVE-2026-115673 Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email
CVE-2026-118167 MC4WP: Mailchimp for WordPress < 4.15.0 - Unauthenticated Subscription Audience Override
CVE-2026-118187 PublishPress Revisions < 4.3.1 - Contributor+ Unpublished Content Disclosure via IDOR
CVE-2026-118186 PublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revi
CVE-2026-86606 iubenda < 3.13.7 - Unauthenticated Stored XSS via Cookie Block HTML Parser
CVE-2026-110813 Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Nam
CVE-2026-110525 MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-Agent
CVE-2026-92396 Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css
CVE-2026-12967 WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass
CVE-2026-87784 Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission
CVE-2026-119259 All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write

Showing top 20 of 30 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes
Same vendor: Unknown