Threats tagged 'ghsa-39h7-ggpg-qmm7'

A vulnerability in the PublishPress Revisions WordPress plugin before version 4.3.1 allows any authenticated user, including those with Subscriber roles, to access the title, content, and excerpt of private, draft, pending, scheduled, or trashed posts of other users via the revision-comparison feature. This occurs because the plugin does not verify user permissions before returning post content.