The Schedule Post Changes With PublishPress Future WordPress plugin is vulnerable to stored cross-site scripting (XSS) attacks. An attacker with the Contributor role or higher can inject JavaScript code via the 'wrapper' and 'dateformat' shortcode attributes, which can be executed in the session of a higher-privileged user who views the content. This vulnerability allows an attacker to potentially take co [truncated]
A high-severity SQL injection vulnerability exists in PublishPress Series plugin versions up to 3.1.3. An administrator must have high privileges to exploit this issue.
A Cross Site Scripting (XSS) vulnerability exists in PublishPress Series plugin versions up to 3.1.3. This CVE was published on 2026-09-17T14:17:17.623Z and last modified on 2026-09-19T15:17:00.513Z.
A DOM-Based XSS vulnerability was discovered in the Post Expirator plugin for WordPress. This issue, tracked as CVE-2026-39482, allows attackers to inject malicious scripts into web pages. The vulnerability has a CVSS score of 6.5 and is classified as MEDIUM severity. The Post Expirator plugin is used by WordPress administrators to schedule posts to expire. The vulnerability occurs when user input is not [truncated]
A Missing Authorization vulnerability in PublishPress Post Expirator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post Expirator: from n/a through <= 4.9.3. The vulnerability requires verification of Post Expirator installations and updates to prevent exploitation. Defenders should assess the impact on access control security levels and prioritize updates or [truncated]
