Plugin icon

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories

post-expirator

Vulnerabilities:

8

Last Updated:

May 5, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-05-04
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.10.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
Fixed in
Fixed in 4.10.1
CVSS
5.5 (medium)
Published
2026-03-22
Title
Post Expirator < 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.10.0
CVSS
5.5 (medium)
Published
2026-01-11
Title
Post Expirator < 4.9.4 - Missing Authorization
Fixed in
Fixed in 4.9.4
CVSS
4.3 (medium)
Published
2026-01-08
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.9.4 - Missing Authorization to Authenticated (Contributor+) Workflow Manipulation
Fixed in
Fixed in 4.9.4
CVSS
5.4 (medium)
Published
2025-12-15
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.9.3 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure
Fixed in
Fixed in 4.9.3
CVSS
4.3 (medium)
Published
2025-11-20
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.9.2 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification
Fixed in
Fixed in 4.9.2
CVSS
4.3 (medium)
Published
2021-10-11
Title
Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion
Fixed in
Fixed in 2.6.0
CVSS
7.1 (high)
Published
2014-08-01
Title
Post Expirator <= 2.1.1 - Cross-Site Request Forgery
Fixed in
Fixed in 2.1.2
CVSS
n/a