Pre-Publish Post Checklist
Pre-Publish Post Checklist has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Pre-Publish Post Checklist has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Ngoc Quang Bach (maysbachs). Pre-Publish Post Checklist is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.0.38.
CVE-2025-53323Pre-Publish Post Checklist <= 3.1 - Missing Authorization
Read the full analysisVulnerability Records
Pre-Publish Post Checklist
Author
danbriapps
Pre-Publish Post Checklist lets you create todo lists for your WordPress posts. You’ll be able to create custom checklist items and control what happens when a user tries to publish a post. With Pre-Publish Post Checklist, you’ll never have to worry about accidentally publishing a post. How Does It Works Create a few checklist items like “Check title for SEO” or “Make sure featured image is set” Decide what you want to do when a user tries to publish, but hasn’t completed all the items Create a new post and start checking those items off! See How It Works
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C