WordPress Vulnerability Scanner WPSec
Vulnerabilities / WP Document Revisions

WP Document Revisions vulnerabilities

Advisories WPSec published for WP Document Revisions. Other sources may list more. Its attack surface: WP Document Revisions on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-01 WPSEC-2026-0083 WP Document Revisions <= 5.4.5 - Authenticated (Contributor+) Sensitive Information Exposure via Document List Shortcode, Blocks and get_documents() Medium 4.3 5.4.6
2026-10-01 WPSEC-2026-0082 WP Document Revisions <= 5.4.5 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Attachment Rename and Deletion via Validate Structure Fix Endpoint Medium 5.4 5.4.6
2026-10-01 WPSEC-2026-0081 WP Document Revisions <= 5.4.5 - Authenticated (Contributor+) Missing Authorization to Revision History Disclosure via document_revisions Shortcode and Block Medium 4.3 5.4.6
2026-10-01 WPSEC-2026-0080 WP Document Revisions <= 5.4.5 - Unauthenticated Missing Authorization via Case-Altered Document REST Routes Low 3.7 5.4.6
2026-10-01 WPSEC-2026-0079 WP Document Revisions <= 5.4.5 - Authenticated (Subscriber+) Missing Authorization to Password-Protected Document and Revision Access via AI Summary and Diff REST Endpoints Medium 4.3 5.4.6
2026-10-01 WPSEC-2026-0078 WP Document Revisions <= 5.5.0 - Authenticated (Contributor+) Missing Authorization to Revision History Disclosure via document_revisions Shortcode and Block Medium 4.3 5.5.1
2026-10-01 WPSEC-2026-0077 WP Document Revisions <= 5.5.0 - Unauthenticated Authorization Bypass via REST Route Case Manipulation Low 3.7 5.5.1
2026-10-01 WPSEC-2026-0076 WP Document Revisions <= 5.5.0 - Authenticated (Subscriber+) Missing Authorization to Restricted Revision Content via AI Summary and Diff REST Endpoints Medium 4.3 5.5.1
2026-10-01 WPSEC-2026-0075 WP Document Revisions <= 5.5.0 - Authenticated (Contributor+) Sensitive Information Exposure via Document List Shortcode, Blocks and get_documents() Medium 4.3 5.5.1
2026-10-01 WPSEC-2026-0074 WP Document Revisions <= 5.5.0 - Authenticated (Contributor+) Insecure Direct Object Reference to Media File Rename and Deletion via Validate Structure Endpoint Medium 5.4 5.5.1
2026-10-01 WPSEC-2026-0073 WP Document Revisions <= 5.6.0 - Authenticated (Contributor+) Insecure Direct Object Reference to Media File Rename and Deletion via Validate Structure Endpoint Medium 5.4 5.6.1
2026-10-01 WPSEC-2026-0072 WP Document Revisions <= 5.6.0 - Authenticated (Subscriber+) Missing Authorization to Restricted Revision Content via AI Summary and Diff REST Endpoints Medium 4.3 5.6.1
2026-10-01 WPSEC-2026-0071 WP Document Revisions <= 5.6.0 - Unauthenticated Authorization Bypass via REST Route Case Manipulation Low 3.7 5.6.1
2026-10-01 WPSEC-2026-0070 WP Document Revisions <= 5.6.0 - Authenticated (Contributor+) Missing Authorization to Revision History Disclosure via document_revisions Shortcode and Block Medium 4.3 5.6.1
2026-10-01 WPSEC-2026-0069 WP Document Revisions <= 5.6.0 - Authenticated (Contributor+) Sensitive Information Exposure via Document List Shortcode, Blocks and get_documents() Medium 4.3 5.6.1
2026-10-01 WPSEC-2026-0068 WP Document Revisions <= 5.6.1 - Authenticated (Author+) Sensitive Information Exposure via Media Library Medium 5.3 5.7.0

License: CC BY 4.0