CVE-2026-39561

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

The Revive.so plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Risk Assessment

Unauthorized users can access functions or data that should be protected, potentially leading to security breaches.

Recommendation

Update the Revive.so plugin to version 2.0.8 or later.

Original NVD description (English source)

Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.7.