CVE-2025-13741 - Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status...

CVE ID : CVE-2025-13741 Published : Dec. 16, 2025, 11:15 a.m. | 36 minutes ago Description : The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to retrieve emails for all users with edit_posts capability. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor