Home / Vulnerability Intelligence / CVE-2026-32539

CVE-2026-32539 - Vulnerability Analysis

CriticalCVSS: 9.3

Last Updated: March 25, 2026

Published: March 25, 2026Updated: March 25, 2026Remote Exploitable

Overview

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL Injection.This issue affects PublishPress Revisions: from n/a through <= 3.7.23.

Severity & Score

Severity: Critical

CVSS Score: 9.3

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

References

https://patchstack.com/database/Wordpress/Plugin/revisionary/vulnerability/wordpress-publishpress-revisions-plugin-3-7-23-sql-injection-vulnerability?_s_id=cve

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 25, 2026

🔴 CVE-2026-32539 - Critical (9.3) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL Injection.This issue affects PublishPress Revisions: from n/a through <= 3.7.23. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32539/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 25, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-32539
Severity: Critical
CVSS Score: 9.3
Status: new
EPSS: 0.0%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

EPSS Score

0.0%Probability of exploitation in the next 30 days