Skip to content
PublishPress Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories
-
CVE-2026-5247
Medium 5.5
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
0.3%
-
CVE-2025-14718
Medium 5.4
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.3 - Missing Authorization to Authenticated (Contributor+) Workflow Manipulation
0.3%
-
CVE-2025-13741
Medium 4.3
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure
0.3%
-
CVE-2025-13149
Medium 4.3
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification
0.2%