PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes, CVE-2026-32539
- CVE, Research URL
- Home page URL
- Published on
- Mar 25, 2026
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL Injection.This issue affects PublishPress Revisions: from n/a through <= 3.7.23.
- Affected versions
-
max 3.7.23.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Image Gallery – Responsive Photo Gallery (CVE-2025-24697) , Feb 05, 2025 |
| Image Gallery – Responsive Photo Gallery (CVE-2024-12403) , Jan 16, 2025 |