PT-2026-146659

Vvveb 1.0.8.4 through 1.0.8.6 contains an authorization bypass vulnerability in the content/revisions revision action that lets low-privileged Authors read other authors' revisions. Attackers can supply a post id, language id, and created at timestamp to retrieve private unpublished drafts, becau...