WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
schema-and-structured-data-for-wp
Published
2023-12-27
Title
Schema & Structured Data for WP & AMP < 1.24 - Contributor+ Stored XSS
Slug
schema-and-structured-data-for-wp
Published
2024-01-12
Title
Schema & Structured Data for WP & AMP < 1.26 - Contributor+ Stored Cross-Site Scripting
Slug
schema-and-structured-data-for-wp
Published
2024-02-19
Title
Schema & Structured Data for WP & AMP < 1.27 - Contributor+ reCaptcha Key Update
Slug
schema-and-structured-data-for-wp
Published
2024-02-19
Title
Schema & Structured Data for WP & AMP < 1.27 - Authenticated Stored XSS
Slug
schema-and-structured-data-for-wp
Published
2024-04-22
Title
Schema & Structured Data for WP & AMP < 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocks
Slug
schema-and-structured-data-for-wp
Published
2024-07-16
Title
Schema & Structured Data for WP & AMP < 1.34.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Slug
schema-and-structured-data-for-wp
Published
2024-10-21
Title
Schema & Structured Data for WP & AMP < 1.36 - Unauthenticated Sensitive Information Exposure
Slug
schema-and-structured-data-for-wp
Published
2025-09-10
Title
Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS
Slug
schema-and-structured-data-for-wp
Published
2025-10-31
Title
Schema & Structured Data for WP & AMP < 1.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
schema-and-structured-data-for-wp
Published
2026-01-22
Title
Schema & Structured Data for WP & AMP < 1.54.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema
Slug
schema-and-structured-data-for-wp
Published
2026-05-20
Title
Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
Slug
schema-and-structured-data-for-wp
Published
2026-09-14
Title
Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema Output
Slug
schema-and-structured-data-for-wp
Published
2026-09-14
Title
Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOR
Slug
schema-and-structured-data-for-wp
Published
2026-09-14
Title
Schema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema Generation
Slug
schema-and-structured-data-for-wp
Published
2026-09-28
Title
Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
Slug
schema-and-structured-data-for-wp
Published
2026-09-30
Title
Schema & Structured Data for WP & AMP < 1.67 - Contributor+ PHP Object Injection
Slug
schema-and-structured-data-for-wp
Published
2026-10-15
Title
Schema & Structured Data for WP & AMP < 1.68 - Unauthenticated Stored XSS via 'saswp_review_text' Parameter
Slug
schema-app-structured-data-for-schemaorg
Published
2023-09-27
Title
Schema App Structured Data < 1.22.4 - Missing Authorization via page_init
Slug
schema-app-structured-data-for-schemaorg
Published
2024-05-23
Title
Schema App Structured Data < 2.2.1 - Missing Authorization
Slug
schema-app-structured-data-for-schemaorg
Published
2024-06-13
Title
Schema App Structured Data < 2.2.1 - Cross-Site Request Forgery
Slug
schema-app-structured-data-for-schemaorg
Published
2024-12-11
Title
Schema App Structured Data < 2.2.5 - Reflected Cross-Site Scripting
Slug
schema-app-structured-data-for-schemaorg
Published
2026-10-28
Title
Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter
Slug
schema-scalpel
Published
2025-10-31
Title
Schema Scalpel < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema
Slug
schema-shortcode
Published
2026-03-20
Title
Schema Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
school-management
Published
2019-07-11
Title
School Management < 57.0 - CSRF and Stored XSS