Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-32539 EUVD-2026-15913

WordPress PublishPress Revisions plugin <= 3.7.23 - SQL Injection vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL Injection.This issue affects PublishPress Revisions: from n/a through <= 3.7.23.

Affected products

VendorProductAffectedFixed
PublishPress PublishPress Revisions ≤ <= 3.7.23 —

References