Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/12/17 12:09 p.m.•25 views

CVE-2025-13741

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...

4.3CVSS5.1AI score0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/16 11:15 a.m.•5 views

CVE-2025-13741 Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...

4.3CVSS4.7AI score0.00258EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/16 11:15 a.m.•48 views

CVE-2025-13741 Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...

4.3CVSS0.00258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•15 views

PT-2025-51474

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...

4.3CVSS5.1AI score0.00258EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•1 views

CVE-2025-13741: Missing Authorization

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it...

4.3CVSS5.7AI score0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder