CVE Catalog
CVE-2026-42677
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.23%
14th percentile - higher than 14% of all known CVEs
Summary
The WP Document Revisions plugin for WordPress lacks authorization, allowing exploitation of incorrectly configured access control security levels. Affects versions before 4.0.0.
Risk Assessment
Unauthorized users may access protected functions or data, potentially leading to information disclosure or unauthorized modifications.
Recommendation
Update the WP Document Revisions plugin to version 4.0.0 or later, which includes an authorization fix.
Other vulnerabilities in WP Document Revisions
Original NVD description (English source)
Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Document Revisions: from n/a before 4.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS