CVE-2026-68541

Prior to version 1.4.1 , the compliance policy management tool PolicyPress is vulnerable to sensitive content disclosure. This is caused by CSS-only web redaction and insecure starter workflow defaults . The issue has been resolved in version 1.4.1 . No specific exploit details or in-the-wild exp...

PT-2026-147147

PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1...