← WordPress Vulnerabilities
WordPress security by component

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 21, 2025; the highest CVE/CNA score is 4.3.

Plugin slug: publishpress-future-unpublish-delete-change-status-trash-change-categories

CVE-2025-13149: Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories: A security weakness

Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedNov 21, 2025
Safe version guidanceSee mitigation notes
Safe version
Nov 21, 2025 CVE-2025-13149
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories: A security weakness
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending