Advisories · Technology

PublishPress Revisions.

Every CVE that names PublishPress Revisions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120851 CVE record

CVSS 4.3 Medium

WordPress PublishPress Revisions plugin <= 4.2.0 - Broken Access Control vulnerability
- PublishPress Revisions
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-32539 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress PublishPress Revisions plugin <= 3.7.23 - SQL Injection vulnerability
- PublishPress Revisions
- SQL injection
Not analysed yet 25 Mar 2026
CVE-2026-25322 CVE record

CVSS 5.4 Medium

WordPress PublishPress Revisions plugin <= 3.7.22 - Cross Site Request Forgery (CSRF) vulnerability
- PublishPress Revisions
- Cross-site request forgery (CSRF)
Not analysed yet 19 Feb 2026