CVE-2025-13741

🗓️ 16 Dec 2025 11:15:44Reported by WordfenceType

Contributors can access all user emails due to missing authorization check in Schedule Post Changes with PublishPress Future.

Reporter	Title	Published	Views	Family All 9
CNNVD	WordPress plugin Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories 安全漏洞	16 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-13741 Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure	16 Dec 202511:15	–	cvelist
EUVD	EUVD-2025-203624	16 Dec 202511:15	–	euvd
NVD	CVE-2025-13741	16 Dec 202512:15	–	nvd
Patchstack	WordPress Post Expirator plugin <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure vulnerability	16 Dec 202500:53	–	patchstack
Positive Technologies	PT-2025-51474	16 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-13741	17 Dec 202512:09	–	redhatcve
Vulnrichment	CVE-2025-13741 Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure	16 Dec 202511:15	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 15, 2025 to January 4, 2026)	8 Jan 202618:20	–	wordfence

Vulners

Node

publishpress schedule_post_changes_with_publishpress_future:_unpublish,_delete,_change_status,_trash,_change_categoriesRange≤4.9.2wordpress

[
  {
    "vendor": "publishpress",
    "product": "Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.9.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/post-expirator/tags/4.9.1/src/Modules/Workflows/Rest/RestApiV1.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2f67da8c-da60-4c77-a8b8-7dfc027662e9

17 Jun 2026 08:34Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.14.3

EPSS0.00229

SSVC

CWE-862