CVE-2026-118186

CVE-2026-118186CVE-2026-118186

Description

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not correctly restrict who may publish content, allowing users such as Contributors who can edit but not publish to make unreviewed posts and pages publicly live, bypassing the intended editorial approval workflow.

Scoring

CVSS 4.9 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Last modified2026-11-06
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.