This vulnerability (CVE-2026-42677) in WP Document Revisions is classified as CWE-862 (Missing Authorization). It allows an attacker to bypass access control mechanisms due to missing or incorrect authorization checks. The issue affects all versions prior to 4.0.0 of the plugin. The CVSS 3.1 base score is 7.5 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality impact without integrity or availability impact. There is no vendor-provided patch or official remediation information at this time, and no known exploits have been observed in the wild.

Successful exploitation could allow an unauthenticated attacker to access sensitive information managed by the WP Document Revisions plugin, leading to a high confidentiality impact. There is no impact on integrity or availability reported. Since the vulnerability involves missing authorization, unauthorized data disclosure is the primary concern.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin or disabling it if feasible. Monitor official channels for updates and apply patches promptly once available.