title: Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion
description: The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts.
problem types: CWE-863 Incorrect Authorization
affected:
{
product: Post Expirator: Automatically Unpublish WordPress Posts
vendor: Unknown
versions:
lessThan: 2.6.0, status: affected, version: 2.6.0, versionType: custom
}