WordPress plugin
Publish approval security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Publish approval vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Cross-Site Request Forgery ≤1.1No patch available | CVE-2025-9617 |
- Medium5.3Cross-Site Request Forgery
≤1.1No patch available
Publish approval: common questions
Does Publish approval have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Publish approval: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Publish approval I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Publish approval vulnerability?
CVE-2025-9617, published Sep 10, 2025: Publish approval <= 1.1 - Cross-Site Request Forgery. Severity: Medium (CVSS 5.3).
Is any Publish approval vulnerability listed in CISA KEV?
No. None of the known Publish approval vulnerabilities is currently listed in the CISA KEV catalog.