Plugin icon

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories

post-expirator

Vulnerabilities:

6

Last Updated:

December 22, 2025

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-01-11
Title
Post Expirator < 4.9.4 - Missing Authorization
Fixed in
Fixed in 4.9.4
CVSS
4.3 (medium)
Published
2026-01-08
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.9.4 - Missing Authorization to Authenticated (Contributor+) Workflow Manipulation
Fixed in
Fixed in 4.9.4
CVSS
5.4 (medium)
Published
2025-12-15
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.9.3 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure
Fixed in
Fixed in 4.9.3
CVSS
4.3 (medium)
Published
2025-11-20
Title
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories < 4.9.2 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification
Fixed in
Fixed in 4.9.2
CVSS
4.3 (medium)
Published
2021-10-11
Title
Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion
Fixed in
Fixed in 2.6.0
CVSS
7.1 (high)
Published
2014-08-01
Title
Post Expirator <= 2.1.1 - Cross-Site Request Forgery
Fixed in
Fixed in 2.1.2
CVSS
n/a