CVE-2026-18436

The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailpress/v1/campaign/<id>/restore-revision/<revision_id>). The route in the vulnerable range was registered without a permissionCallback, allowing the restoreRevision() handler to run for unauthenticated requests and overwrite a campaign's content_html with any prior revision. This makes it possible for unauthenticated attackers to modify campaign content by restoring an arbitrary revision.

• CWE-862

• https://plugins.trac.wordpress.org/browser/mailerpress/trunk/src/Api/CampaignRevisions.php#L155
• https://plugins.trac.wordpress.org/browser/mailerpress/trunk/src/Api/CampaignRevisions.php#L156
• https://www.wordfence.com/threat-intel/vulnerabilities/id/793a7ef0-8938-47a6-80ed-83f69fbbb27f?source=cve

Published

Jul 31, 2026

Last Modified

Aug 12, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1843The Super Page Cache plugin for WordPress is vulnerable to S…7.2
• CVE-2026-18430HumHub 1.18.4 contains a stored cross-site scripting vulnera…7.2
• CVE-2026-18431The Avada theme for WordPress is vulnerable to Arbitrary Fil…9.8
• CVE-2026-18432The Frontend Admin by DynamiApps plugin for WordPress is vul…9.8
• CVE-2026-18433GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-18435The Kadence Blocks — Page Builder Toolkit for Gutenberg Edit…6.4
• CVE-2026-18437The MailerPress – Newsletter, email marketing & AI automatio…5.3
• CVE-2026-18438The Templately – Elementor & Gutenberg Template Library: 650…8.8
• CVE-2026-18439The Tutor LMS – eLearning and online course solution plugin …4.3
• CVE-2026-1844The PixelYourSite PRO plugin for WordPress is vulnerable to …7.2
• CVE-2026-18441The Appointment Booking Plugin – LatePoint | Calendar & Sche…4.3
• CVE-2026-18442The WCFM Marketplace – Multivendor Marketplace for WooCommer…7.5