cleantalk
Vulnerabilities and Security Researches

PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes, CVE-2026-32539

CVE, Research URL

CVE-2026-32539

Published on
Mar 25, 2026
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL Injection.This issue affects PublishPress Revisions: from n/a through <= 3.7.23.
Affected versions
max 3.7.23.
Status
vulnerable