Threats tagged 'ghsa-j4v2-25rp-cpm7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-13149The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin Medium4.32025-11-21GCVE DatabaseCVE-2025-13149 The PublishPress Future WordPress plugin, versions up to and including 4.9.1, contains a vulnerability due to a missing authorization check in the saveFutureActionData function. This flaw allows authenticated users with author-level access or higher to modify the status of arbitrary posts and pages via the REST API, potentially leading to unauthorized content changes. Report on CVE-2025-13149 Vulnerability CWE-862 #ghsa-j4v2-25rp-cpm7	GCVE Database	2025-11-21

Page 1 of 1