CVE-2026-42677CWE-862

WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerability

High · published June 1, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
32.4
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects WP Document Revisions: from n/a before 4.0.0.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-01T15:16Z
EPSS history
Timeline
  • 01 JUN 15:16Z
    WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerability
    cvelistv5