Wordpress Alert: Unauthorized post publication

What it looks like

A contributor-level action publishes content despite editorial restrictions.

Why it matters

Unreviewed or malicious material can go live.

What to check

Check publishing routes and capability checks.

Documentation

This is an exploit pattern to check in installed components, not a claim that every WordPress site has this flaw. Confirm the product and version against its advisories before treating a site as affected. See WordPress roles and capabilities.