{"id":"CVE-2026-118188","published":"2026-11-06T06:16:41.033","lastModified":"2026-11-06T06:16:41.033","description":"The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user is permitted to read a given post before returning its content through its revision-comparison feature, allowing any authenticated user, including a Subscriber, to read the title, content and excerpt of any other user's private, draft, pending, scheduled or trashed post.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/4bdd6e0a-1991-4fdd-95a1-bca4f4445d8f/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}