The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Categories plugin for WordPress is vulnerable to unauthorized access of data due a missing capability check on the getAuthors function in all versions up to, and including, 4.9.2. This makes it possible authenticated attackers, with Contributor-level above, retrieve emails users edit_posts capability.