CVE-2025-69361
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The Post Expirator plugin (up to version 4.9.3) contains a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized users to access functions that should be protected.
Risk Assessment
The risk is the possibility of unauthorized access to sensitive functions and data, which may lead to compromise of system integrity and confidentiality.
Recommendation
It is recommended to update the Post Expirator plugin to a version newer than 4.9.3 if available, and to review and fix access control configurations.
Other vulnerabilities in Post Expirator
Original NVD description (English source)
Missing Authorization vulnerability in PublishPress Post Expirator post-expirator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Expirator: from n/a through <= 4.9.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS