CVE-2026-18436 | MailPress Plugin up to 1.5.0 on WordPress Campaign Revision-Restore REST Endpoint campaign restoreRevision privileges management

A vulnerability has been found in MailPress Plugin up to 1.5.0 on WordPress and classified as problematic. This issue affects the function restoreRevision of the file /wp-json/mailpress/v1/campaign of the component Campaign Revision-Restore REST Endpoint. Performing a manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-18436. It is possible to initiate the attack remotely. There is no exploit available.