SP
Product
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories
4
CVEs
0
On KEV
5.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5247 | 5.5 | May 5 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Affected: through 4.10.0 |
| CVE-2025-14718 | 5.4 | Jan 9 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.3 - Missing Authorization to Authenticated (Contributor+) Workflow Manipulation Affected: through 4.9.3 |
| CVE-2025-13741 | 4.3 | Dec 16 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure Affected: through 4.9.2 |
| CVE-2025-13149 | 4.3 | Nov 21 | Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification Affected: through 4.9.1 |
Showing 4