PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes

Information

Software Type Plugin
Software Slug revisionary (view on wordpress.org)
Software Status Active
Software Author publishpress
Software Website publishpress.com
Software Downloads 808,308
Software Active Installs 10,000
Software Record Last Updated September 6, 2026

4 Vulnerabilities

Submit a Vulnerability
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.23 - Unauthenticated SQL Injection
7.5
CVE-2026-32539
Mar 20, 2026
Researcher: Nguyen Ba Khanh
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.22 - Cross-Site Request Forgery
4.3
CVE-2026-25322
Jan 29, 2026
Researcher: lilmingwa13
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
4.3
CVE-2024-11154
Nov 19, 2024
Researcher: Dominik Dziura (Domons)
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site Scripting
6.1
CVE-2024-9436
Oct 10, 2024
Researcher: vgo0
Title Status CVE ID CVSS Researchers Date
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.23 - Unauthenticated SQL Injection Patched CVE-2026-32539 7.5 Nguyen Ba Khanh March 20, 2026
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.22 - Cross-Site Request Forgery Patched CVE-2026-25322 4.3 lilmingwa13 January 29, 2026
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure Patched CVE-2024-11154 4.3 Dominik Dziura (Domons) November 19, 2024
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.5.14 - Reflected Cross-Site Scripting Patched CVE-2024-9436 6.1 vgo0 October 10, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation