Search vulnerabilities

Results 3

Export CSV
CVE-2026-39482

WordPress Post Expirator plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Post Expirator post-expirator allows DOM-Based XSS.This issue affects Post Expirator: from n/a through <= 4.9.4.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
CVE-2025-69361

WordPress Post Expirator plugin <= 4.9.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in PublishPress Post Expirator post-expirator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Expirator: from n/a through <= 4.9.3.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
CVE-2021-24783

Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion

The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products