MEDIUMCVSS v3.1 4.9Vulnerability
CVE-2026-118186
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not correctly restrict who may publish content, allowing users such as Contributors who can edit but not publish to make unreviewed posts and pages publicly live, bypassing the intended editorial approval workflow.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Epss score
- 0.00151
- Cvss severity
- MEDIUM
- Cvss score
- 4.9
- Retrieved at
- 2026-11-07T06:44:43+00:00
- Last source
- FIRST EPSS
- Score
- 4.9
- Cvss version
- 3.1
- Cve id
- CVE-2026-118186
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- First seen by Signal
- 2026-11-06T10:16:10+00:00
- Name
- CVE-2026-118186
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- Published at
- 2026-11-06T06:16:40.820
- Last modified
- 2026-11-06T20:09:13.780
- Epss percentile
- 0.04282
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph