WordPress security by component
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories
Plugin description
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published May 05, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
post-expiratorLatest vulnerability
CVE-2026-5247: Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories: Cross-site scripting
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is affected by cross-site scripting. Exploitation requires at least administrator-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 4.10.0.
| Safe version |
|
||
|---|---|---|---|
| May 05, 2026 |
CVE-2026-5247
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories: Cross-site scripting
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is affected by cross-site scripting. Exploitation requires at least administrator-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 4.10.0.
|
> 4.10.0 |
CVE5.5
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39482
Post Expirator: Cross-site scripting
Post Expirator is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 4.9.4.
|
4.10.0 |
CVE6.5
NVDPending
|
| Jan 06, 2026 |
CVE-2025-69361
Post Expirator: A security weakness
Post Expirator is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Dec 16, 2025 |
CVE-2025-13741
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories: A security weakness
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Nov 08, 2021 |
CVE-2021-24783
Post Expirator: A security weakness
Post Expirator is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVD6.5
|