Read the docs

PublishPress

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

PublishPress records in CISA KEV

No PublishPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Capabilities 2 records HIGH Post Expirator 1 record LOW

Records

1 record in Post Expirator · all components

TI-2021-07065 CVE-2021-24783 · GHSA-46rg-rhmq-hq2r

Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion

Priority LOW 30

The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00824 Published 2021-11-08 Fixed in 2.6.0 CWE-863
Open these records in search →