# WP Document Revisions <= 5.8.1 - Unauthenticated Sensitive Information Exposure via oEmbed Document Attachment File Names

- **ID:** WPSEC-2026-1874
- **Plugin:** WP Document Revisions (`wp-document-revisions`), https://wordpress.org/plugins/wp-document-revisions/
- **Affected versions:** all versions before 5.8.2
- **Fixed in:** 5.8.2 (Update to 5.8.2 or later.)
- **Severity:** Medium 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **Weakness:** CWE-200
- **Usage among sites WPSec scans:** plugin Low, affected versions Low (as of 2026-10-28)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/wp-document-revisions
- **Fix released:** 2026-10-27
- **Published:** 2026-10-28
- **URL:** https://wpsec.com/vuln/WPSEC-2026-1874/

## Description

The WP Document Revisions plugin for WordPress is vulnerable to Sensitive Information Exposure via the oEmbed lookup and attachment titles in all versions up to, and including, 5.8.1. This is due to document attachments being titled with their stored file name, which was returned to anonymous users. This makes it possible for unauthenticated attackers to learn stored file names and, on sites that do not block direct access to the uploads folder, download the files of password-protected documents or earlier revisions of published documents.

## References

- https://wpsec.com/vuln/WPSEC-2026-1874/
- https://plugins.svn.wordpress.org/wp-document-revisions/tags/5.8.2/
- https://wordpress.org/plugins/wp-document-revisions/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-1874/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.