PT-2026-20692 · WordPress · Publishpress Revisions

Lilmingwa13 · Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-25322

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions PublishPress PublishPress Revisions versions through 3.7.22

Description A Cross-Site Request Forgery (CSRF) issue exists in PublishPress Revisions. This allows attackers to perform actions on behalf of authenticated users. The issue allows Cross Site Request Forgery.

Recommendations Update PublishPress PublishPress Revisions to a version later than 3.7.22.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-25322

Produtos afetados

Publishpress Revisions

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25322 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/revisionary/vulnerability/wordpress-publishpress-revisions-plugin-3-7-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2024411390828597281 · Publicação no Twitter